What is this?

This knowledgebase contains questions and answers about PRTG Network Monitor and network monitoring in general.

Learn more

PRTG Network Monitor

Intuitive to Use. Easy to manage.
More than 500,000 users rely on Paessler PRTG every day. Find out how you can reduce cost, increase QoS and ease planning, as well.

Free Download

Top Tags


View all Tags

Microsoft Defender ASR Rule - Block persistence through WMI event subscription

Votes:

0

Does anyone know or had problems with enabling the MS ASR rule "Block persistence through WMI event subscription" and PRTG monitoring through WMI.

prtg windows wmi

Created on Jun 30, 2023 9:30:36 AM



3 Replies

Votes:

0

Hello,

Thanks for contacting us. Can you please describe with more details what you are trying to accomplish? PRTG has the WMI Security Sensor to monitor Windows Defender and Event logs sensors for the Windows Event Viewer using WMI.

If you are getting a specific error, please share or feel free to open a new support ticket for further assistance.

Created on Jul 5, 2023 3:28:15 PM by Mitzi Rodriguez [Paessler support]



Votes:

0

Hi, No Specific error. I am looking at enabling the ASR rule "Block persistence through WMI event subscription" through Microsoft Defender 365. I was wondering if this had been seen to have a negative affect on PRTG WMI monitoring by any PRTG users.

Created on Jul 6, 2023 8:34:16 AM



Votes:

0

Hello,

We haven't been reported with any similar issues or problems related to that specifically. Please feel free to open a support ticket if you face any issues for further investigation.

Thanks.

Created on Jul 7, 2023 1:43:21 PM by Mitzi Rodriguez [Paessler support]




Disclaimer: The information in the Paessler Knowledge Base comes without warranty of any kind. Use at your own risk. Before applying any instructions please exercise proper system administrator housekeeping. You must make sure that a proper backup of all your data is available.