Usere.config is not signed
Can we get the user.config file signed like the installers? Defeneder XDR is flagging this file as a vulnerablity because it isn't sign.
Welcome to our community!
Can we get the user.config file signed like the installers? Defeneder XDR is flagging this file as a vulnerablity because it isn't sign.
Normally you sign binaries not the configuration files. The config is stored in a folder that is accessible by an account that has admin rights.
I know ConnectWise also encodes / encrypts sensitive data that maybe stored in there if that helps.