Question 1
(Topic 1)
Is it possible to search for unsigned files in the console?
Select an option, then click Submit answer.
- ○ Yes, by using the search: NOT process_publisher_state:FILE_SIGNATURE_STATE_SIGNED
- ○ No, it is not possible to return a query for unsigned files.
- ○ Yes, by using the search: process_publisher_state:FILE_SIGNATURE_STATE_UNSIGNED
- ○ Yes, by looking at signed and unsigned executables in the environment and seeing if another difference can be found, thus locating unsigned files in the environment.
