Is it possible to search for unsigned files in the console?
A.
Yes, by using the search: NOT process_publisher_state:FILE_SIGNATURE_STATE_SIGNED
B.
No, it is not possible to return a query for unsigned files.
C.
Yes, by using the search: process_publisher_state:FILE_SIGNATURE_STATE_UNSIGNED
D.
Yes, by looking at signed and unsigned executables in the environment and seeing if another difference can be found, thus locating unsigned files in the environment.
Tested this on a live environment.
NOT process_publisher_state:FILE_SIGNATURE_STATE_SIGNED returned only "unverified" entries while process_publisher_state:FILE_SIGNATURE_STATE_UNSIGNED return nothing
upvoted 1 times
...
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
HCM1985
7 months, 1 week ago