D1e49aac 8f56 2024 B9ba 993a6d77406c. The mitigation block credential stealing from the windows local security authority subsystem (lsass.exe) can block some schtaks.exe processes and also processes started by. Attack surface reduction rules target specific behaviors that are typically used by malware and malicious apps to infect machines, such as:

Block executable files from running unless they meet a prevalence, age, or trusted list criteria. Both rules work in the way that the execution is blocked but only rule 1 is shown in the event viewer.