Windows 10 Home - "Unauthorized changes blocked"

I'm running Insider Preview on the fast ring and the number of incidents is significantly reduced in the past few updates but I don't know if that's because the 'whitelist' has seen improvements or the functionality has been changed/reduced. Are there internal release notes that might shed some light on this?

Or, if you think CFA ransomware protection is a good idea, then just follow these simple steps to whitelist the app that was blocked:

1. Click on the notifications icon at the far right in the taskbar.
2. Write down the file path provided in the notification.
3. Click on the notification, and then on the Add button (+).
4. Navigate to the file identified in the notification, then select and “open” it.

As recommended in this Microsoft Support document:

https://support.microsoft.com/en-us/help/4012987/windows-10-virus-threat-protection-windows-defender-security-center

Of course the file path in the Unauthorized Changes Blocked notification tends to be truncated and you might need to open Event Viewer; navigate to the Windows Defender Operationallog; and locate the blocking event (Event ID 1123) in order to see the full path:

1. Right-click on the Start button and select Event Viewer.
2. Navigate to Applications and Services > Microsoft > Windows > Windows Defender > Operational
3. Filter for (or just look for): Event ID 1123

GreginMich