Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 1114225" data-attributes="member: 32260">Yes, the ASR rules can make the attacks harder to perform and can also discourage some attackers. However, I do not know any tests that could measure properly the impact of ASR rules on security. Furthermore, the Enterprises can use different ASR rules. It is a complex problem.Edit.Please note that I do not think that Microsoft Defender (MD) on default settings is a top AV. There are several AV protection tests. In some tests MD scores just like top AVs. In others, the results are not so good. If you include the tests from two or three years, the difference between MD and top AVs is not big but statistically significant. I agree with Leo, that decision to use 3rd party AV over MD should depend on other factors like using additional features, possible performance problems, or control over advanced settings. Many people will skip MD for that. If those factors are not important, then MD + SmartScreen is OK. Advanced users can also apply tools to control the MD advanced features and Windows built-in security.</blockquote>

[QUOTE="Andy Ful, post: 1114225, member: 32260"] Yes, the ASR rules can make the attacks harder to perform and can also discourage some attackers. However, I do not know any tests that could measure properly the impact of ASR rules on security. Furthermore, the Enterprises can use different ASR rules. It is a complex problem. Edit. Please note that I do not think that Microsoft Defender (MD) on default settings is a top AV. There are several AV protection tests. In some tests MD scores just like top AVs. In others, the results are not so good. If you include the tests from two or three years, the difference between MD and top AVs is not big but statistically significant. I agree with Leo, that decision to use 3rd party AV over MD should depend on other factors like using additional features, possible performance problems, or control over advanced settings. Many people will skip MD for that. If those factors are not important, then MD + SmartScreen is OK. Advanced users can also apply tools to control the MD advanced features and Windows built-in security. [/QUOTE]

Verification