Reply to thread

Message

<blockquote data-quote="Trident" data-source="post: 1098190" data-attributes="member: 99014">Not even that, it’s just user-dependent systems are promoted as the ultimate security, which shouldn’t be the case. It’s like me, showing threat hunting and other EDR features. Obviously through these features I will successfully remediate attacks. But this is showing my personal skills and not the software capabilities.But on another thread we’ve had discussion with Cruelsister and we’ve pretty much understood each other. Btw she is on holiday now so no need to summon her in that many posts. She is not around to read them.Then again, you cannot hold her or anyone else responsible for what they show. It’s up to everyone to interpret these videos and showcasing, the way they want.I personally, am not convinced in the quality of any system that is highly user dependent and I am not convinced in the quality of systems that allow you to run live malware on the same system where you do your work.I had the same argument with this Webroot supporter that was trying to convince me how amazing Webroot is, with the rollback system.Allowing malware to run, whether it will be restricted, contained, disconnected is madness.This should be your last-let incident mitigation (when everything else has failed), but not your be-all end-all.There are cloud and appliance sandboxes that are reinforced and specially for this purpose, of running and analysing malware.No MSSP employees in their right mind will allow malware to run on the same system where you work with information.</blockquote>

[QUOTE="Trident, post: 1098190, member: 99014"] Not even that, it’s just user-dependent systems are promoted as the ultimate security, which shouldn’t be the case. It’s like me, showing threat hunting and other EDR features. Obviously through these features I will successfully remediate attacks. But this is showing my personal skills and not the software capabilities. But on another thread we’ve had discussion with Cruelsister and we’ve pretty much understood each other. Btw she is on holiday now so no need to summon her in that many posts. She is not around to read them. Then again, you cannot hold her or anyone else responsible for what they show. It’s up to everyone to interpret these videos and showcasing, the way they want. I personally, am not convinced in the quality of any system that is highly user dependent and I am not convinced in the quality of systems that allow you to run live malware on the same system where you do your work. I had the same argument with this Webroot supporter that was trying to convince me how amazing Webroot is, with the rollback system. Allowing malware to run, whether it will be restricted, contained, disconnected is madness. This should be your last-let incident mitigation (when everything else has failed), but not your be-all end-all. There are cloud and appliance sandboxes that are reinforced and specially for this purpose, of running and analysing malware. No MSSP employees in their right mind will allow malware to run on the same system where you work with information. [/QUOTE]

Verification