Make sandbox full virtualize any file thats unknow by CIS 8

[wasgij6]

@yro post:3

No, its not. CIS 8 only isolate these files if they are incoming from internet. Thats why we need to change the settings a little bit to have the full virtualization working for any file from enywhere. and thats why I made this request.

for this you can switch to proactive config. Egemen the lead developer of CIS has already said why they changed the default behavior.

@egemen post:62

Right so the new default configuration keeps track of files downloaded from the Internet or coming from the removable or network based media. We have collected telemetry information for about 2 years and found out that automatically sandboxing unknown executables from these sources will prevent infections.

In your case, you are testing with some VMs and have specific scenarios. You need to fine tune either CIS or your environment. CIS is flexible though. By all means you can simply switch to old way of doing things. All you need to do is to go to Rules #3 in auto-sandbox policy and remove all source criteria.

I attached the screenshot.

Since they just changed it i honestly dont think they will change it back.