Download Aurora Agent Lite for Windows blocked by BITDEFENDER about aurora-agent-lite

[nasbench]

Hi @nightbird2021

That detection by Bitdefender (and sometimes other AV) comes from the fact that Aurora-lite contains the detection rules (Sigma) in clear text. These rules might contain some strings that an AV might think are malicious (its usually 1 or 2 powershell rules).

Aurora is meant to be installed along side an AV as its job is not to replace an AV but to provide a larger coverage for certain type of attacks that an AV isn't designed to alert or trigger on.

If you can provide the file that windows defender triggered on perhaps we can try to mitigate it.

[nasbench]

Additional info could be found here SigmaHQ/sigma#4925

Closing this issue as resolved for now. Please feel free to re-open in case of additional questions