Airlock's Free File to Test Trust for EDR and Application Whitelisting
Posted on 11th November 2023
Airlock Releases Free Document to Test Chained Trust in EDR and Application Whitelisting Solutions
Today Airlock Digital is releasing a free Microsoft Word document to test ‘Chained Trust’ in EDR and Application Whitelisting solutions. This is where a product will trust a parent process (such as winword.exe) and automatically place trust in any spawned child processes.
Security products that are configured to use ‘Chained Trust’ may provide a reduced level of security.
This document contains Macro code, which attempts to drop either a .dll or .exe file in the document's working directory and execute it, allowing you to audit product configurations.
You can download the document here: https://www.airlockdigital.com/AirlockApps/Airlock_Application_Whitelisting_Macro_Security_Auditor_v1.0.doc
Please let us know if you find this useful or have any feedback by contacting firstname.lastname@example.org or @airlockdigital.