Download help

Why your browser warns about our installer

The short version: nothing was found in the file. EasySIEM is a new website, and every release is a brand-new file that few people have downloaded yet. Browsers and Windows are cautious about files they haven't seen much of — signed ones included — so they warn until a file has built up a reputation, and that only comes from downloads over time.

What you might see

The wording depends on your browser and its version. The common ones:

Google Chrome

“Suspicious download blocked”or“This file isn't commonly downloaded”

Microsoft Edge

“EasySiemSetup.exe isn't commonly downloaded. Make sure you trust EasySiemSetup.exe before you open it.”

Windows, when you run it

“Windows protected your PC: Microsoft Defender SmartScreen prevented an unrecognized app from starting.”

Why it happens

Chrome's Safe Browsing, and Microsoft Defender SmartScreen in Edge and Windows, don't only look for known malware. They also judge a download by its history: how many people have downloaded and run that exact file, and for how long. A file with no history gets a warning by default, no matter who made it.

That describes every EasySIEM release on its first day. It's a young project on a new website, and each release is a new file, so it starts with no download history at all. The warning means “we haven't seen this file much yet”, not “we found something wrong with it”.

Signed, but still new

Our Windows installers are code-signed. The certificate comes through Microsoft's own code-signing service, which verified who we are before issuing it. The signature proves two things: who published the file, and that it hasn't been changed since it was signed. A tampered copy would fail the check.

The publisher Windows shows is Tyson Wall, who builds EasySIEM: that's the name on the certificate.

What a signature doesn't do is give a new file a reputation on its first day. Windows and browsers build that from real downloads, so every install that runs without trouble adds to it, and the warnings fade as it grows.

What goes into every release

Our own code, nothing hidden. No part of it tries to hide from or get around antivirus: every component is a plain program calling documented Windows APIs.
Signed with the certificate above.
Scanned with Microsoft Defender before it's published.
Served only from easysiem.com, over HTTPS.

Check it yourself

Download it from easysiem.com, and nowhere else.
Right-click the downloaded file, choose Properties, and open the Digital Signatures tab. The signer should be Tyson Wall. Select the signature and choose Details: Windows should say “This digital signature is OK.” If the tab is missing, the name is different, or the signature isn't OK, don't run the file.
Right-click the file again and choose Scan with Microsoft Defender. On Windows 11 it's under Show more options.

Getting past the warning

Only for a file you downloaded from easysiem.com yourself:

Chrome: open the downloads list (the download icon, top right), select the file, and choose to keep it.
Edge: in the downloads list, open the file's … menu and choose Keep, then Show more, then Keep anyway.
Windows (“Windows protected your PC”): choose More info, check that the publisher says Tyson Wall, then choose Run anyway.

Questions, or something that doesn't look right? Email tyson@easysiem.com.

Head back to the downloads whenever you're ready.

Downloads →