Reply to thread

Message

<blockquote data-quote="509322" data-source="post: 758136">In a nutshell, he explicitly stated if he used 32-bit Meterpreter he could disable Cylance and pwn the system. A solution that applies protection against 64 bit, but not 32 bit, is no solution at all as opposed to a partial solution. Such utilities can be easily thwarted by disabling stuff on Windows. It is simple enough and causes little to no inconvenience for the vast majority of home users. And for enterprise users that know what they&#039;re doing, there are multiple ways to disable stuff and get it to work without major inconvenience.Technically, did Cylance do better than the others ? Yes, it did. One cannot dispute that fact. However, those that want Cylance to be better, will pick that up, and twist it and re-purpose it to fit &quot;Cylance is better.&quot;The issue with Meterpreter, Metasploit, PowerSploit - and the ad infinitum other utilities - is that they are used primarily in targeted attacks. Basically, &quot;user session&quot; attacks. And most people here already know the basic economic issues of targeting home users.</blockquote>

[QUOTE="509322, post: 758136"] In a nutshell, he explicitly stated if he used 32-bit Meterpreter he could disable Cylance and pwn the system. A solution that applies protection against 64 bit, but not 32 bit, is no solution at all as opposed to a partial solution. Such utilities can be easily thwarted by disabling stuff on Windows. It is simple enough and causes little to no inconvenience for the vast majority of home users. And for enterprise users that know what they're doing, there are multiple ways to disable stuff and get it to work without major inconvenience. Technically, did Cylance do better than the others ? Yes, it did. One cannot dispute that fact. However, those that want Cylance to be better, will pick that up, and twist it and re-purpose it to fit "Cylance is better." The issue with Meterpreter, Metasploit, PowerSploit - and the ad infinitum other utilities - is that they are used primarily in targeted attacks. Basically, "user session" attacks. And most people here already know the basic economic issues of targeting home users. [/QUOTE]

Verification