Reply to thread

Message

<blockquote data-quote="danb" data-source="post: 1018140" data-attributes="member: 62850">Does DefenderUI disable Smart App Control?[URL unfurl=&quot;true&quot;]https://www.wilderssecurity.com/threads/defenderui.439693/page-10#post-3124278[/URL]Ummmm, NOPE!!!&nbsp; I did a quick reboot at the end to make sure.[MEDIA=youtube]S10O0fosu2M[/MEDIA]I tested Smart App Control against a lot of safe and malicious files, and I have to say some of the results surprised me, and it would be great if [USER=92939]@Shadowra[/USER] would take it for a test drive.&nbsp; One of the most perplexing files was a file I complied in Visual Studio that contained only safe code (it was a test sample of our new digital signature code), but it was only a couple of minutes old and SAC did not block it.&nbsp; I cannot be too hard on SAC, because it did render the correct verdict afterall, but any product that follows true zero-trust principles would have blocked that file, even if it did not originate from the web.&nbsp; So I am thinking that SAC is more of a refined version of smart screen / MOTW, and less a true zero-trust solution.&nbsp; SAC is very young and I need to play around with it more to really figure it out, but I will say that I was surprised by several of the verdicts.&nbsp; I was even a little surprised it let me install DefenderUI, although DefenderUI is up to 15,000 downloads a day now, so maybe that is not too surprising.Also, the 22H2 bug that 2 users have reported is not related to DefenderUI, it is only related to the Pro version of DefenderUI.And just in case anyone missed this <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite110" alt=";)" title="Wink&nbsp; &nbsp; ;)" loading="lazy" data-shortname=";)" />... <a href="https://malwaretips.com/threads/defenderui.109495/post-1017464" target="_blank">DefenderUI</a></blockquote>

[QUOTE="danb, post: 1018140, member: 62850"] Does DefenderUI disable Smart App Control? [URL unfurl="true"]https://www.wilderssecurity.com/threads/defenderui.439693/page-10#post-3124278[/URL] Ummmm, NOPE!!! I did a quick reboot at the end to make sure. [MEDIA=youtube]S10O0fosu2M[/MEDIA] I tested Smart App Control against a lot of safe and malicious files, and I have to say some of the results surprised me, and it would be great if [USER=92939]@Shadowra[/USER] would take it for a test drive. One of the most perplexing files was a file I complied in Visual Studio that contained only safe code (it was a test sample of our new digital signature code), but it was only a couple of minutes old and SAC did not block it. I cannot be too hard on SAC, because it did render the correct verdict afterall, but any product that follows true zero-trust principles would have blocked that file, even if it did not originate from the web. So I am thinking that SAC is more of a refined version of smart screen / MOTW, and less a true zero-trust solution. SAC is very young and I need to play around with it more to really figure it out, but I will say that I was surprised by several of the verdicts. I was even a little surprised it let me install DefenderUI, although DefenderUI is up to 15,000 downloads a day now, so maybe that is not too surprising. Also, the 22H2 bug that 2 users have reported is not related to DefenderUI, it is only related to the Pro version of DefenderUI. And just in case anyone missed this ;)... [URL="https://malwaretips.com/threads/defenderui.109495/post-1017464"]DefenderUI[/URL] [/QUOTE]

Verification