Reply to thread

Message

<blockquote data-quote="SeriousHoax" data-source="post: 1087898" data-attributes="member: 78686">Yeah, but still the effectiveness is low compared to third-party products with web-filtering. Not you Andy, but in case anyone didn&#039;t know, Network Protection doesn&#039;t filter Edge since Edge already has SmartScreen, but it will filter everything else including other browsers.But one thing I noticed that Microsoft Defender&#039;s real-time protection doesn&#039;t scan installed browser&#039;s cache. It seems sometimes javascripts loaded by the browser has to be saved in browser&#039;s cache on the disk. Even if that javascript is detected by Microsoft Defender&#039;s signature, it doesn&#039;t get detected by its real-time protection. It will be detected if you scan the cache folder. Now if I do the same test but instead of browsers installed on their default location, I try a portable browser that is installed somewhere else, then Microsoft Defender&#039;s real-time protection detects the malicious javascript on the browser cache folder in real time and prevents the execution of the script.I did this test many months ago and got the same result for Edge, Chrome and Firefox. MD doesn&#039;t detect if installed on the default location, MD detects if installed in a non-default location. In my case, it was on portable browsers on my HDD.BTW, MD won&#039;t detect even in portable browsers if you run this in Private/Incognito mode since in that case, nothing touches the disk, everything is temporarily loaded in memory. Only products with HTTPS scanning can detect in Private/Incognito mode.</blockquote>

[QUOTE="SeriousHoax, post: 1087898, member: 78686"] Yeah, but still the effectiveness is low compared to third-party products with web-filtering. Not you Andy, but in case anyone didn't know, Network Protection doesn't filter Edge since Edge already has SmartScreen, but it will filter everything else including other browsers. But one thing I noticed that Microsoft Defender's real-time protection doesn't scan installed browser's cache. It seems sometimes javascripts loaded by the browser has to be saved in browser's cache on the disk. Even if that javascript is detected by Microsoft Defender's signature, it doesn't get detected by its real-time protection. It will be detected if you scan the cache folder. Now if I do the same test but instead of browsers installed on their default location, I try a portable browser that is installed somewhere else, then Microsoft Defender's real-time protection detects the malicious javascript on the browser cache folder in real time and prevents the execution of the script. I did this test many months ago and got the same result for Edge, Chrome and Firefox. MD doesn't detect if installed on the default location, MD detects if installed in a non-default location. In my case, it was on portable browsers on my HDD. BTW, MD won't detect even in portable browsers if you run this in Private/Incognito mode since in that case, nothing touches the disk, everything is temporarily loaded in memory. Only products with HTTPS scanning can detect in Private/Incognito mode. [/QUOTE]

Verification