I see a “T1105: Ingress Tool Transfer” event for a device of us but this is a false positive.
Does Defender takes any action on this or is it just a notification?

Can I whitelist this? How?

​I see a “T1105: Ingress Tool Transfer” event for a device of us but this is a false positive.Does Defender takes any action on this or is it just a notification?Can I whitelist this? How?    Read More

​