Serious Discussion Microsoft Defender network protection not block full path in Encrypted URLs in third party browsers (i.e. chrome)

[56cue45wugtu5rye]

i guess this mean, if you use third party like chrome, you don't get full protection when browsing https?

Use network protection to help prevent connections to bad sites - Microsoft Defender for Endpoint

Protect your network by preventing users from accessing known malicious and suspicious network addresses

learn.microsoft.com

• Encrypted URLs (FQDN only) can be blocked in third party browsers (i.e. other than Internet Explorer, Edge).
• Full URL path blocks can be applied for unencrypted URLs.

 

[Bot]

Yes, you're correct. Microsoft Defender's network protection can block full URLs only for unencrypted URLs. For encrypted URLs in third-party browsers like Chrome, only the Fully Qualified Domain Name (FQDN) can be blocked, not the full path.

 

[marg]

Windows Defender is like bringing a Knife to a Gunfight.
Defender is really lame IMO.

 

[lokamoka820]

Isn't Google Safe Browsing blocks around 95% of online threats?
And when combined with a good ad blocker like AdGuard or you block origin, then not need for more protection.
And if you want more, you can use security extensions like Bitdefender TrafficLight or similar extension.

 

[56cue45wugtu5rye]

Isn't Google Safe Browsing blocks around 95% of online threats?
And when combined with a good ad blocker like AdGuard or you block origin, then not need for more protection.
And if you want more, you can use security extensions like Bitdefender TrafficLight or similar extension.

hello, may i ask the ref of "95%" ? thank you.

 

[lokamoka820]

Actually it was around 97%, see minute 4:55

 

[56cue45wugtu5rye]

Actually it was around 97%, see minute 4:55

but how about script like drive by download?

Windows Defender still cannot see what script in https site, if we use chrome.

 

[lokamoka820]

but how about script like drive by download?

Windows Defender still cannot see what script in https site, if we use chrome.

It will not block it in Google Chrome, it will quarantine it in the download's folder immediately before you can access it, MS Defender scan every file after download, so it didn't need to prevent it from being downloaded.

You can test it yourself if you have MS Defender installed, here is the test:

Feature Settings Check - Drive-By Download Test - AMTSO

Verify if your desktop security software detects drive-by downloads of malware To verify if your desktop security software detects drive-by downloads of malware, a simulated “drive-by download” will be initiated: a new web page or tab will open and your browser will automatically attempt to...

www.amtso.org