description ThreatLocker Overview
ThreatLocker is a software solution that uses application whitelisting to prevent unauthorized applications from running on endpoints, significantly reducing the risk of malware infections and zero-day exploits by enforcing approved software execution only.
help ThreatLocker FAQ
What happens when a user launches an application that ThreatLocker has not approved?
Under an allowlisting policy, ThreatLocker blocks software, scripts, and processes that are not covered by an explicit rule. An administrator can review the request and approve the application by file, certificate, path, or another policy condition.
What is ThreatLocker Ringfencing?
Ringfencing limits what an approved application can access or launch after it starts. For example, a policy can prevent Microsoft Word from invoking PowerShell or reaching files that the user does not need for that workflow.
Can ThreatLocker remove local administrator rights without stopping every support task?
Its elevation controls can grant administrative privileges to a specific approved application rather than to the user's entire session. This supports least privilege while still allowing defined installers or maintenance tools to run with elevation.
How is ThreatLocker different from a traditional antivirus product?
Traditional antivirus primarily identifies malicious files or behavior, while ThreatLocker starts from a deny-by-default execution policy. It is often deployed alongside Microsoft Defender or another endpoint detection product rather than treated as a direct replacement for every antivirus function.
explore Explore More
Similar to ThreatLocker
See all arrow_forward
Reviews & Comments
Write a Review
Be the first to review
Share your thoughts with the community and help others make better decisions.
