Reply to thread

Message

<blockquote data-quote="Marana" data-source="post: 822730" data-attributes="member: 69370">Thank you for your explanation. Since I have been using default-deny SRP for years, I cannot imagine living without it in the future, either. I guess that I&#039;ll keep OSA, too; at least till the first headache... <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite135" alt=":giggle:" title="Giggle&nbsp; &nbsp; :giggle:" loading="lazy" data-shortname=":giggle:" />I was a bit surprised of your mentioning that WD ASR rules would probably be <a href="https://www.offensivecon.org/speakers/2019/emeric-nasi.html" target="_blank">harder to bypass</a> than OSA Anti-Exploit, although I must confess that I have not checked if the vulnerabilities presented in February&#039;s OffensiveCon have already been fixed (Emeric&#039;s presentation can be found <a href="https://github.com/sevagas/WindowsDefender_ASR_Bypass-OffensiveCon2019" target="_blank">here</a>).</blockquote>

[QUOTE="Marana, post: 822730, member: 69370"] Thank you for your explanation. Since I have been using default-deny SRP for years, I cannot imagine living without it in the future, either. I guess that I'll keep OSA, too; at least till the first headache... :giggle: I was a bit surprised of your mentioning that WD ASR rules would probably be [URL='https://www.offensivecon.org/speakers/2019/emeric-nasi.html']harder to bypass[/URL] than OSA Anti-Exploit, although I must confess that I have not checked if the vulnerabilities presented in February's OffensiveCon have already been fixed (Emeric's presentation can be found [URL='https://github.com/sevagas/WindowsDefender_ASR_Bypass-OffensiveCon2019']here[/URL]). [/QUOTE]

Verification