I understand that the Hardened Mode set on Aggressive checks executables against a white list on the cloud and blocks ones that are not on the list. If blocked, it gives you the option to allow executable and make an exception.
Is this correct?
Does it still work in some fashion if you are not connected to the internet?