It would be great to be able to manually blacklist applications from running.
B
Brandon Arakaki
It would be great to be able to manually blacklist applications from running, either by name, path, hash or certificate.
We are currently investigating ways to do this and had to resort to a custom C# application that we install as service. Threatlocker, AutoElevate and now Blackpoint cyber all have this feature as part of their services. It would be a huge value add and I would hate to have to sign up for another service from yet another vendor.
B
Brandon Garrett
Definitely +1. A curated list of commonly abused IT tools would be excellent to be able to block rapidly. Combine this with being able to select the tools/GUIDs of Screenconnect/etc so you can block all others immediately would be super helpful.