keybase / keybase/client

kbfsdokan compatibilty issue with Windows Defender ATP

Open
#17,366 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go
Stars
9.2k
Forks
1.3k
Avg merge
12h 58m
Merged PRs (30d)
56

Description

kbgsdokan has a compatibility issue with Windows Degender ATP (https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-exploit-guard/controlled-folders-exploit-guard?ocid=cx-blog-mmpc)

Specially with 'In memory anomaly and behavior monitoring', Windows 10 regularly displays a warning that kbfs dokan wants to manipulate memory.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by reproducing the warning with kbfsdokan on Windows while Windows Defender ATP's “In memory anomaly and behavior monitoring” is enabled. The issue provides no file or test entry point; done means kbfsdokan no longer triggers the reported memory-manipulation warning.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
operating-systems, security
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.