I am Windows 10 Pro x64 1809 user and I am using CIS 11.0.0.6744.
Also I have to use WSL sometimes.
I have to report HIPS cannot remember rules for WSL components.
Is there any way to disable HIPS for WSL subsystem? I am tired to switch off HIPS every time when I need WSL running, also it would be nice to disable this component for WSL only, not for the whole system.
How so? You need to make sure remember my answer is checked in the alert. If HIPS is set to verbose mode alerts, you need to expand the alert to see the exact detail of the each request. I’m guessing you keep seeing alerts for accessing a protected file or registry key even after allowing correct? If so you will see alerts for each specific file or registry path.