Cybersecurity

ASRmageddon: What Happened and How We Responded

1 min read

April 17, 2023

With customers waking up to Defender deleting their shortcuts the race to restore productivity began. Infused Innovations quickly took action to mitigate the effects of the problem by changing the problematic ASR rule to Audit-only and notifying them of the situation. We then created and pushed out a script to restore the most common applications used by our clients, focusing on trying to get them back up and running quickly. We were able to restore the majority of our clients’ shortcuts twelve hours before Microsoft released their first remediation script, giving our managed services customers a comprehensive solution returning them to work more quickly. We then released the script publicly, freely-available on Github, to benefit the wider technical community.