Reply to thread

Message

<blockquote data-quote="Victor M" data-source="post: 1058065" data-attributes="member: 96560">Hi [USER=93976]@Sandbox Breaker[/USER] ,It&#039;s great to be in your shoes.Unfortunately my red team don&#039;t know the word &#039;quit&#039;.Since we are talking about firewalls, what do you think of this config:&nbsp; <a href="https://malwaretips.com/threads/default-deny-windows-firewall-setup-how-to.124928/" target="_blank">Setup Idea - Default Deny Windows Firewall setup How To</a>There Are other layers in my defenses. But the whole point of this test is to test the abilities of OpenEDR and it&#039;s included Comodo Internet Security. I don&#039;t like Comodo&#039;s firewlall policy and have replaced with the above and added MalwareBytes&#039; Anti-exploit. But I have kept their other protections. And their sales person is pitching me to upgrade to their &#039;advanced&#039; package. I queried their support about the ability to detect and stop Metasploit&#039;s shell Meterpreter on friday, they have kicked the query to the advanced team, but they haven&#039;t responded yet.</blockquote>

[QUOTE="Victor M, post: 1058065, member: 96560"] Hi [USER=93976]@Sandbox Breaker[/USER] , It's great to be in your shoes. Unfortunately my red team don't know the word 'quit'. Since we are talking about firewalls, what do you think of this config: [URL='https://malwaretips.com/threads/default-deny-windows-firewall-setup-how-to.124928/']Setup Idea - Default Deny Windows Firewall setup How To[/URL] There Are other layers in my defenses. But the whole point of this test is to test the abilities of OpenEDR and it's included Comodo Internet Security. I don't like Comodo's firewlall policy and have replaced with the above and added MalwareBytes' Anti-exploit. But I have kept their other protections. And their sales person is pitching me to upgrade to their 'advanced' package. I queried their support about the ability to detect and stop Metasploit's shell Meterpreter on friday, they have kicked the query to the advanced team, but they haven't responded yet. [/QUOTE]

Verification