Just because the agent tried it does not mean it needs it
Watch on YouTube The activity reports Microsoft describes apply to process containers in Windows. If a report shows that the agent tried to read a folder, do we add it to the policy? Not necessarily. Here is my counterpoint as the host: the report tells us what the agent tried to use, but does not determine whether that
The activity reports Microsoft describes apply to process containers in Windows. If a report shows that the agent tried to read a folder, do we add it to the policy? Not necessarily. Here is my counterpoint as the host: the report tells us what the agent tried to use, but does not determine whether that access was necessary to update the website. An attempt to read a project dependency may reveal a missing permission. An attempt to open personal documents does not become reasonable just because it appears in the log. Microsoft’s own proposal includes reviewing, testing, and adjusting the policy.
Full episode: https://youtu.be/qDrtUsR3yCs
🤖 AI-generated content: the script, voices, and images for this episode were produced using artificial intelligence tools.
#Shorts