chocolatey / chocolatey/ChocolateyGUI

SentinelOne detects Chococlatey Gui as suspicious file

Open
#889 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
C#
Stars
1.8k
Forks
271
Avg merge
4d 13h
Merged PRs (30d)
1

Description

Hello,

When trying to install, update or reinstall Chocolatey GUI, Sentinel One antivirus detects it as a suspicious file and blocks it, it also detects it as Suspicious Thread.

Thanks!

![image](https://user-images.githubusercontent.com/543450/133969399-0be6feae-8dff-45b4-8f76-631759fa0e0d.png)

![image](https://user-images.githubusercontent.com/543450/133969362-8764b1db-cd04-4f4c-a042-2d9d9e3564a2.png)

Contributor guide

Open the contributing guide

Research direction

No source file, test, or entry point is named. Start by reproducing installation, update, or reinstallation of Chocolatey GUI with SentinelOne enabled and review the attached detection details; the work is done when the cause of the suspicious-file and suspicious-thread detections is identified and the blocking issue has a verified resolution.

Written by the indexing model from the issue text.

Assessment

Tech stack
csharp
Domain
desktop, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.