FireEye recommends establishing a baseline of legitimate processes that need access to LSASS, and then exclude them using Process Guard exclusion. Without this step, there is a possibility of causing disruption to your critical business applications.
Why should I not enable blocking mode immediately after installation?
- Published on Sep 11, 2026
- 1 minute(s) read
Was this article helpful?