- Aug 15, 2018
- 634
The only anti-executable I may give a try is NVT ERP. It allows you to monitor the Program Files and the Windows Folder. I'll install ERP on the other PC I have where ESET IS is installed.
Last edited:
Wraith's Gaming PC Config for 2019
- Thread starter Wraith
- Start date
- Aug 15, 2018
- 634
- Mar 29, 2018
- 7,100
Check Wilders. Lots of discussion over there which I have followed only casually since I don't use it.
- Aug 15, 2018
- 634
UPDATE:
Performed a clean OS Installation.
For browser, I went with Brave(with Avira extension) instead of Chrome.
for AV back to ESET IS along with AppGuard 4 (the original combo that I used to have)
Performed a clean OS Installation.
For browser, I went with Brave(with Avira extension) instead of Chrome.
for AV back to ESET IS along with AppGuard 4 (the original combo that I used to have)
- Aug 15, 2018
- 634
Replaced AppGuard with Simple Software Restriction Policy. Thanks @bribon77
iwrconsultancy.co.uk
IWR Consultancy : Simple Software-Restriction Policy
See our downloads page for the latest release.
- Dec 23, 2014
- 8,118
People who use AppGuard and SSRP usually have unprotected shortcuts and Windows writable subfolders. It is not easy to protect shortcuts properly in SRP, but it is possible. On Windows 7, PowerShell and some LOLBins should be also blocked. Some hardening is also advisable like blocking remote features (RDP, Remote Registry, Remote Shell) and SMB protocols.
- Aug 15, 2018
- 634
An excellent point about the unprotected shortcuts. Currently I don't have that covered. For the blocking of remote features, I use SH and I have ESET HIPS and firewall rules set up to block execution of powershell & wscript. On my windows 10 pc, I use VS alongwith the tried and tested H_C designed by you my friend. Light, simple and effective.People who use AppGuard and SSRP usually have unprotected shortcuts and Windows writable subfolders. It is not easy to protect shortcuts properly in SRP, but it is possible. On Windows 7, PowerShell and some LOLBins should be also blocked. Some hardening is also advisable like blocking remote features (RDP, Remote Registry, Remote Shell) and SMB protocols.
Similar threads
