Brave making NTFSControlFile system calls

Brave has been making NTFS ControlFile system calls that windows security is picking up and being listed in event viewer.

Possibly Microsoft Windows Defender senses something.

See:

https://learn.microsoft.com/en-us/defender-endpoint/overview-attack-surface-reduction?view=o365-worldwide

Scroll down to: “List of attack surface reduction events”

1 Like