Forum Discussion
Anonymous
4 years agoZero Click Zero Day in Microsoft Support Diagnostic Tool...
Zero Click Zero Day in Microsoft Support Diagnostic Tool Exploited in the Wild (CVE-2022-30190) On May 30, Microsoft released an advisory for a zero-day in the Microsoft Windows Support Diagnostic T...
paul_jacoby
4 years agoConnect Contributor III
Detection of the GPO-based mitigations would be VERY helpful -- see https://admx.help/?Category=Windows_10_2016&Policy=Microsoft.Policies.ScriptedDiagnostics::ScriptedDiagnosticsExecutionPolicy
For whatever reason Microsoft has documented in it's blog two GPO settings that _DON'T_ work, but ignored the one that does.
It would be ideal if plugin 161691 could see check all of the corresponding reg keys for each mitigation -- (Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\ScriptedDiagnostics\EnableDiagnostics = 0)