Reply to thread

Message

<blockquote data-quote="ForgottenSeer 109138" data-source="post: 1082980">[USER=92939]@Shadowra[/USER] The below LOLBins list has been around since 2004 although modified and added server .exe&#039;s. It has been posted here before I think back some years. Its extensive and used by many that add LOLBins blocking in their applications. Appguard, is not a install and test at default application. Its not designed to be run at default settings. It is designed to be placed on the system, locked down with no interaction from the &quot;average users&quot; to protect them from themselves. As any products that allow users &quot;choices&quot; is redundant as the user can simply click to ignore the warning if they want to run something bad enough, no matter how severe the warning looks. Locking the system ensures this will not be the case. Using parental controls of Appguard making a Superuser will allow you to set it up so the normal users can not change settings. It is not an easy application to set up and administer, most users lack the knowledge of the application let alone the operating system to know what and how to block. This leaves many users that claim Appguard not effective not only mistakenly wrong but silly because you can be sure they do not know how to use it claiming so. Testing, can not be done with just a folder of samples in user space, as you will bore the crowd with nothing but &quot;DOH&quot; it wont run. You have to be very creative to test Appguard with simulated attacks. Not to mention there is no &quot;trial&quot; version to test at this point. Apologies ahead of time for formatting and items being cut off since the website here limits ways to address such lists. [SPOILER=&quot;LOLBins&quot;][ATTACH=full]282791[/ATTACH][ATTACH=full]282792[/ATTACH][ATTACH=full]282793[/ATTACH][ATTACH=full]282794[/ATTACH][ATTACH=full]282795[/ATTACH][ATTACH=full]282796[/ATTACH][/SPOILER]</blockquote>

[QUOTE="ForgottenSeer 109138, post: 1082980"] [USER=92939]@Shadowra[/USER] The below LOLBins list has been around since 2004 although modified and added server .exe's. It has been posted here before I think back some years. Its extensive and used by many that add LOLBins blocking in their applications. Appguard, is not a install and test at default application. Its not designed to be run at default settings. It is designed to be placed on the system, locked down with no interaction from the "average users" to protect them from themselves. As any products that allow users "choices" is redundant as the user can simply click to ignore the warning if they want to run something bad enough, no matter how severe the warning looks. Locking the system ensures this will not be the case. Using parental controls of Appguard making a Superuser will allow you to set it up so the normal users can not change settings. It is not an easy application to set up and administer, most users lack the knowledge of the application let alone the operating system to know what and how to block. This leaves many users that claim Appguard not effective not only mistakenly wrong but silly because you can be sure they do not know how to use it claiming so. Testing, can not be done with just a folder of samples in user space, as you will bore the crowd with nothing but "DOH" it wont run. You have to be very creative to test Appguard with simulated attacks. Not to mention there is no "trial" version to test at this point. Apologies ahead of time for formatting and items being cut off since the website here limits ways to address such lists. [SPOILER="LOLBins"][ATTACH type="full"]282791[/ATTACH][ATTACH type="full"]282792[/ATTACH][ATTACH type="full"]282793[/ATTACH][ATTACH type="full"]282794[/ATTACH][ATTACH type="full"]282795[/ATTACH][ATTACH type="full"]282796[/ATTACH][/SPOILER] [/QUOTE]

Verification