Before ThreatLocker Agent 8.2, when elevating a user to be able to edit IP address in Network Settings, the user would be allowed to change the IP address, but also allowed to change other information like hostname.
Improvements to ThreatLocker Agent 8.2 allow administrators to customize and limit permissions to specific settings.
The new options added include:
<ul>
<li>ArgumentsForExecution - if set, will build out command line arguments for executions</li>
</ul>
<img src="https://cdn.livechat-static.com/api/file/kb/file/9686855/ae0a2f4985-22b23d0f909537a58c53.png" alt="undefined" style="float:none;height: undefined;width: undefined"/>

<ul>
<li>ArgumentsForNewProcess - if set, will build out command line arguments for new processes</li>
</ul>
<img src="https://cdn.livechat-static.com/api/file/kb/file/9686855/c94df7abab-2e9c00b553c4e4e12d14.png" alt="undefined" style="float:none;height: undefined;width: undefined"/>

<ul>
<li>ArgumentsForElevation - if set, will build out command line arguments for elevation</li>
</ul>
<img src="https://cdn.livechat-static.com/api/file/kb/file/9686855/b90e87e0f9-8dc27ee2941e0c9014b9.png" alt="undefined" style="float:none;height: undefined;width: undefined"/>

<ul>
<li>UseDNSCacheToGetHostnames - if set, will attempt a DNS lookup if the driver does not return back a domain using domain name parsing. If not set, the domain will be empty if the driver returns nothing.</li>
</ul>
<img src="https://cdn.livechat-static.com/api/file/kb/file/9686855/1cb8962821-289a0653bb4e78c57aec.png" alt="undefined" style="float:none;height: undefined;width: undefined"/>

Before ThreatLocker Agent 8.2, when elevating a user to be able to edit IP address in Network Settings,  the user would be allowed to change the IP address, but also allowed to change other information like hostname.
Improvements to ThreatLocker Agent 8.2 allow administrators to customize and limit permissions to specific settings.
The new options added include:
ArgumentsForExecution - if set, will build out command line arguments for executions
 

ArgumentsForNewProcess - if set, will build out command line arguments for new processes
 

ArgumentsForElevation - if set, will build out command line arguments for elevation
 

UseDNSCacheToGetHostnames - if set, will attempt a DNS lookup if the driver does not return back a domain using domain name parsing. If not set, the domain will be empty if the driver returns nothing.
 


Changes to Elevation in ThreatLocker Version 8.2

Preventing the Exploitation of 3CX 

Preventing the Exploitation of CVE-2023-23397

Microsoft Peer-to-Peer Updates

ThreatLocker Endpoint Security Quality Guarantee

Eaglesoft and ThreatLocker Computers Not Checking In

Preventing the Exploitation of CVE-2022-30190 (Follina)

Applying Policies to Users or Active Directory Groups

Blocking and Permitting USB Drives

Changes to Adobe 6/8/2021 

Computer failing to update

Configuring with DUO Authentication

Create a Computer Group that does not learn

Creating a New Administrator

Default Computer Group Policies

Deploying Policies

Diagnosing an Application with an issue

Email Parsing Rules in ConnectWise Manage

Event Log Error Key

Excluded Processes

Getting your Unique Identifier from ThreatLocker

Hermetic Wiper: ThreatLocker Recommended Policy

Issue with RMM Deployment

Log4J Vulnerability

Managing Application Definitions

Managing Application Policies

Merging Application Definitions

Notifications for Requests

Permitting All Signed Files in a Directory

Permitting Blocked Files

Permitting Software from the Approval Center

Permitting Software From the Computers Page

Preventing BCDEdit From Being Weaponized

Preventing Bitlocker from being Weaponized

Remote Presence

Response to Reports of Webroot Compromised File

Restarting the ThreatLocker Agent

Setting the ThreatLocker Agent Update Channel 

Setting Up SMS Alerts for ThreatLocker Requests

Setting up the Active Directory Sync Service

ThreatLocker Application Control Agent Data Collection

ThreatLocker Override Codes

ThreatLocker Popup is not happening when something is blocked

ThreatLocker Portal Performance 

ThreatLocker Stub Installer

Trusting an Application by a Certificate

Uninstalling the ThreatLocker Agent

Updating the ThreatLocker Version on a Single Computer

Updating ThreatLocker to the Latest Version

User Permissions 

Using Learning Mode to Track Installed Files from an RMM or Software Deployment Tool

Using the Console App to Verify the ThreatLocker MAC Agent is Running

Using the ThreatLocker Unified Audit

Using ThreatLocker to Mitigate CVE-2021-40444

Why is an application that matches a built-in application being blocked?

Windows 11 Upgrade and ThreatLocker 

ThreatLocker Security and Privacy

Trial Expiry

The ThreatLocker Testing Environment

Allowing ThreatLockerService to Retrieve your AD Groups

Customer Deal Registration

ThreatLocker Mitigation and GoAnywhereMFT Zero-Day Exploit

Preventing the Exploitation of CVE-2023-2033

Rubber Ducky Data Exfiltration | Google Bucket

Preventing the Exploitation of MOVEit Vulnerability (CVE-2023-34362)

Proxy Benefits and Dangers

Browser Extensions Affecting the ThreatLocker Testing Environment

Retrieving Your Computer ID

ThreatLocker Agent Tray

Protecting Fileservers While Allowing Remote Machines to Access Shared Files



Browser Extensions Affecting ThreatLocker Portal Performance

How to Use .NET Regex Within ThreatLocker

SSL Inspection

General

Search our Knowledge Base