Airlock releases free document to test chained trust in EDR and Application Whitelisting solutions - Airlock Digital

Today Airlock Digital is releasing a free Microsoft Word document to test ‘Chained Trust’ in EDR and Application Whitelisting solutions. is where a product will trust a parent process (such as winword.exe) and automatically place trust in any spawned child processes.

Security products that are configured to use ‘Chained Trust’ may provide a reduced level of security.

This document contains Macro code, which attempts to drop either a .dll or .exe file in the documents working directory and execute it, allowing you to audit product configurations.

You can download the document here: https://www.airlockdigital.com/AirlockApps/Airlock_Application_Whitelisting_Macro_Security_Auditor_v1.0.doc
SHA256Sum: e39b1abff16db7a7f6d3b52e6d01d29dd423da0504358082acd1073e439c5723

Please let us know if you find this useful or have any feedback by contacting [email protected] or @airlockdigital.

Our Latest Blogs

1 Feb 2023

Airlock v5.1 & v5.0.9 avail...

This month we are excited to announce the release of two new versions of Airlock: Airlock v5.0.9: This version is the Long Term Support (LTS) branch ...

7 Dec 2022

Risky business – is the ke...

This week Airlock Digital sponsored the Risky Business podcast #688 and spoke to Patrick Gray about admin to kernel as a security boundary, and the li...

29 Sep 2022

Risky business – why micro...

In this Soap Box podcast Patrick Gray interviews Airlock Digital CTO Daniel Schell and CEO David Cottingham about Microsoft’s new Smart Application ...

31 May 2022

Risky business – vsto offi...

This week Daniel Schell discussed some research done in house at Airlock Digital on the Risky Business podcast, regarding VSTO office files. Check it ...

17 May 2022

Make phishing great again. vsto ...

This article can also be read on medium here: https://medium.com/@airlockdigital/make-phishing-great-again-vsto-office-files-are-the-new-macro-nightma...

22 Mar 2022

Risky biz soap box: why allowlis...

This week Airlock Digital co-founders Daniel Schell and Dave Cottingham join host Patrick Gray to talk about: What an effective allowlisting program ...

18 Jul 2021

Preventing ransomware and zero d...

Continued successful exploitation of the software supply chain As the world continues to assess the scope of the biggest global ransomware attack on ...