Device Security blocked "Resources\Extras\piddrv64.sys" when installing graphics driver

[Regloh28]

When installing the latest graphics driver version 31.0.101.4369 for Iris Xe Graphics (gfx_win_101.4369.exe) the attack surface reduction component of Windows Device Security blocked the file  "Resources\Extras\piddrv64.sys" according to the rule "Block abuse of in-the-wild exploited vulnerable signed drivers". It seems the file is on the Microsoft block list of dangerous signed drivers.

According to file location it is related to extra features and not a core component of the driver.

Would you please check this issue? Either it is a false alert, then the rule needs to be updated. Otherwise it might be required to remove this file or use an updated version.

[davidohnson85]

In this case, it seems that the attack surface reduction component of Windows Device Security is blocking a file related to the graphics driver installation. This could be due to the file being flagged as potentially dangerous or being on a blocklist maintained by Microsoft.

To address this issue, I recommend reaching out to Microsoft Support or the support channels provided by the manufacturer of your device. They will be able to investigate the specific file and rule in question and provide guidance on how to proceed. They can help determine if it's a false positive, update the rule if necessary, or provide instructions on how to safely install the graphics driver without compromising system security.

Regards;

David Johnson.