Hello,
Has anyone noticed that the “… has been Run Virtually” notification appears only intermittently when an Unrecognized app is auto-sandboxed?
The issue seems sporadic, but I am not too sure.
Thanks,
HJLBX
The sandbox alert notification only appears once for each new unrecognized, that means when the application is executed for the first time, a sandbox alert will show telling saying it has sandboxed. But on subsequent execution the alert will not be shown, but you can tell if an application is sandboxed by looking at the sandboxed application list/view active process list or the defense+ logs.
Thank you.