Get-WindowsUpdateLog triggers Microsoft Attack Surface Reduction (ASR) Rules
We were trying to diagnose a problem with Windows Updates today using Get-WindowsUpdateLog on Windows Server 2019. We kept getting blocked by ASR rule C0033C00-D16D-4114-A5A0-DC9B3A7D2CEB (Block use of copied or impersonated system tools) which kept tripping on the scripts use of tracerpt.exe which is supposed to be located in C:\Windows\System32. We kept getting this: Looking … Read more