Reply to thread

Message

<blockquote data-quote="ForgottenSeer 92963" data-source="post: 961358">[ATTACH=full]261313[/ATTACH]What I think the above PRO features in yellow and green.Yellow:Microsoft Defender has a built-in tamper protection. Because DUI requires changing the M$ Defender settings, you probably need to disable tamper protection of M$D. The Pro feature compensates this loss in security, by offering a more granular tamper protection than the built-in M$D tamper protection.Green:The Anti_Malware and Anti-Exploit Contextual engine probably is VoodooShield&#039;s exploit protection. This means that vulnerable processes (like your browser or e-mail)are are not allowed to run programs. This is like extending the ASR rule block child processes of OFFICE programs to other vulnerable processes.Dynamical Security Postures is probably the smart anti-execution lock of VoodooShield. Some processes are automatically whitelisted because their parent process is a safe process or because they are on the cloud white list. When your browser or e-mail is running, non-whitelisted processes are probably not allowed to run. Because Dan is planning to offer DUI-PRO besides VoodooShield I don&#039;t know whether or not the Voodoo AI rating is taken into account, but he also said that they overlap, so the AI-rating might also be used in above features in the smart protection.But let&#039;s see what Dan has to say about it.I am running DUI-PRO along with Simple Windows Hardening. DUI-Pro is not Configure Defender + Simple Windows Hardening, but more like Configure Defender combined with OS-Armor.[USER=62850]@danb[/USER]When I de-installed DUI-PRO the Microsoft Defender Virus &amp; Threat detection settings were not turned on again in the &quot;Security at a glance console&quot;.</blockquote>

[QUOTE="ForgottenSeer 92963, post: 961358"] [ATTACH type="full" alt="1634389096866.png"]261313[/ATTACH] What I think the above PRO features in yellow and green. Yellow: Microsoft Defender has a built-in tamper protection. Because DUI requires changing the M$ Defender settings, you probably need to disable tamper protection of M$D. The Pro feature compensates this loss in security, by offering a more granular tamper protection than the built-in M$D tamper protection. Green: The Anti_Malware and Anti-Exploit Contextual engine probably is VoodooShield's exploit protection. This means that vulnerable processes (like your browser or e-mail)are are not allowed to run programs. This is like extending the ASR rule block child processes of OFFICE programs to other vulnerable processes. Dynamical Security Postures is probably the smart anti-execution lock of VoodooShield. Some processes are automatically whitelisted because their parent process is a safe process or because they are on the cloud white list. When your browser or e-mail is running, non-whitelisted processes are probably not allowed to run. Because Dan is planning to offer DUI-PRO besides VoodooShield I don't know whether or not the Voodoo AI rating is taken into account, but he also said that they overlap, so the AI-rating might also be used in above features in the smart protection. But let's see what Dan has to say about it. I am running DUI-PRO along with Simple Windows Hardening. DUI-Pro is not Configure Defender + Simple Windows Hardening, but more like Configure Defender combined with OS-Armor. [USER=62850]@danb[/USER] When I de-installed DUI-PRO the Microsoft Defender Virus & Threat detection settings were not turned on again in the "Security at a glance console". [/QUOTE]

Verification