Reply to thread

Message

<blockquote data-quote="RoboMan" data-source="post: 773400" data-attributes="member: 53544">I have been playing with BitDefender Total Security for the past days and I found its modules to be a very interesting piece of work.If you head to &quot;Safe Files&quot; module you will see there are two options: Protected Folders and Application Access.[SPOILER=&quot;Safe Files&quot;][ATTACH=full]200331[/ATTACH][/SPOILER]Protected Folders works as an anti-ransomware protection component, denying modification on the specified folders.Application Access allows whitelistening programs that will be able to perform such modifications.Testing such components went great, no visible issues. So I took it a step further and added AppData and ProgramData folders to Protected Folders component, in order to deny any modification, payload drops, etc.And it worked great! Everything on such folders was getting denied permissions. Of course, this is a double shape tool, so many regular programs I used were stuck without being able to open. But it&#039;s possible to default deny everything.Now anybody has any idea or tip on how to make this work better? What to include and what to exclude? Trying to make it work so I can also use it as an anti-executable <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite109" alt=":)" title="Smile&nbsp; &nbsp; :)" loading="lazy" data-shortname=":)" /></blockquote>

[QUOTE="RoboMan, post: 773400, member: 53544"] I have been playing with BitDefender Total Security for the past days and I found its modules to be a very interesting piece of work. If you head to "Safe Files" module you will see there are two options: [B]Protected Folders and Application Access.[/B] [SPOILER="Safe Files"][ATTACH=full]200331[/ATTACH][/SPOILER] [B]Protected Folders[/B] works as an anti-ransomware protection component, denying modification on the specified folders. [B]Application Access[/B] allows whitelistening programs that will be able to perform such modifications. Testing such components went great, no visible issues. So I took it a step further and added [B]AppData[/B] and [B]ProgramData [/B]folders to Protected Folders component, in order to deny any modification, payload drops, etc. And it worked great! Everything on such folders was getting denied permissions. Of course, this is a double shape tool, so many regular programs I used were stuck without being able to open. But it's possible to default deny everything. Now anybody has any idea or tip on how to make this work better? What to include and what to exclude? Trying to make it work so I can also use it as an anti-executable :) [/QUOTE]

Verification