Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 869934" data-attributes="member: 32260">The fileless anti-scripting protection is applied in H_C by SRP (PowerShell works in Constrained Language Mode), &lt;Block Sponsors&gt;, &lt;Protect Shortcuts&gt;, &lt;FirewallHardening&gt;, &lt;ConfigureDefender&gt;.You forgot that other H_C settings, ConfigureDefender and FirewallHardening can add to the strictness.If you will define the strictness as chances to block something that the user would not want to block, then on Windows 10 (RS is always the base of calculations):RS = 2, Basic = -1, Strict = +2, Enhanced =+1, CD HIGH = +1, CD MAX =+ 4, FirewallHardening (FH)= +1 or +2, other H_C hardening +1 or +2.For example:Basic_Recommended = -1 + 2 = 1Basic_Recommended_Enhanced = -1 + 2 + 1 = 2Recommended = 2Basic_Recommended + CD HIGH + FH (H_C recommended) = -1 + 2 + 1 + 1 = 3Recommended + CD HIGH + FH (H_C recommended) = 2 + 1 + 1 = 4Strict_Recommended_Enhanced = 2 + 2 + 1 = 5Basic_Recommended + CD MAX = -1 + 2 + 4 = 5etc.</blockquote>

[QUOTE="Andy Ful, post: 869934, member: 32260"] The fileless anti-scripting protection is applied in H_C by SRP (PowerShell works in Constrained Language Mode), <Block Sponsors>, <Protect Shortcuts>, <FirewallHardening>, <ConfigureDefender>. You forgot that other H_C settings, ConfigureDefender and FirewallHardening can add to the strictness. If you will define the strictness as [COLOR=rgb(184, 49, 47)]chances to block something that the user would not want to block[/COLOR], then on Windows 10 (RS is always the base of calculations): [COLOR=rgb(0, 168, 133)][B]RS = 2[/B][/COLOR], Basic = -1, Strict = +2, Enhanced =+1, CD HIGH = +1, CD MAX =+ 4, FirewallHardening (FH)= +1 or +2, other H_C hardening +1 or +2. For example: Basic_Recommended = -1 + 2 = 1 Basic_Recommended_Enhanced = -1 + 2 + 1 = 2 Recommended = 2 Basic_Recommended + CD HIGH + FH (H_C recommended) = -1 + 2 + 1 + 1 = 3 Recommended + CD HIGH + FH (H_C recommended) = 2 + 1 + 1 = 4 Strict_Recommended_Enhanced = 2 + 2 + 1 = 5 Basic_Recommended + CD MAX = -1 + 2 + 4 = 5 etc. [/QUOTE]

Verification