Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 804141" data-attributes="member: 32260">There are some important reasons for applying memory protection in Enterprises, for example:<ol>
<li data-xf-list-type="ol">Targeted attacks.</li>
<li data-xf-list-type="ol">In memory attacks from the Local Network.</li>
<li data-xf-list-type="ol">SMB Protocols and Remote features cannot be disabled.</li>
<li data-xf-list-type="ol">Commonly abused Sponsors (script Interpreters &amp; LOLBins) cannot be restricted or blocked.</li>
</ol>H_C settings do not protect memory. In the home environment, the memory infections are performed when the system is already compromised, on the contrary to the enterprise environment. Furthermore, on Windows 10 the memory protection can be configured via WD Exploit Protection, which is available for all Windows versions.With H_C&#039;s settings, the memory protection could be useful on the vulnerable system or with unpatched &amp; commonly abused software (like unsupported MS Office or Adobe Acrobat Reader), although many memory attacks would be prevented via blocked Sponsors and default-deny setup.</blockquote>

[QUOTE="Andy Ful, post: 804141, member: 32260"] There are some important reasons for applying memory protection in Enterprises, for example: [LIST=1] [*]Targeted attacks. [*]In memory attacks from the Local Network. [*]SMB Protocols and Remote features cannot be disabled. [*]Commonly abused Sponsors (script Interpreters & LOLBins) cannot be restricted or blocked. [/LIST] H_C settings do not protect memory. In the home environment, the memory infections are performed when the system is already compromised, on the contrary to the enterprise environment. Furthermore, on Windows 10 the memory protection can be configured via WD Exploit Protection, which is available for all Windows versions. With H_C's settings, the memory protection could be useful on the vulnerable system or with unpatched & commonly abused software (like unsupported MS Office or Adobe Acrobat Reader), although many memory attacks would be prevented via blocked Sponsors and default-deny setup. [/QUOTE]

Verification