Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 847325" data-attributes="member: 32260">Defender and the Exploit/Fileless test.Unfortunately, MRG Effitas uses Windows 7 and Windows 10 in this test, even when in the methodology section only Windows 7 is mentioned. There is no way to know from the report, how many samples require Windows 10. Of course, the samples which were run on Windows 7 cannot be stoped by Defender, because it is not an antivirus (only anti-spyware engine is present). In the Exploit/Fileless test, Windows 7 is used because it is a common Windows version in organizations and enterprises. As we can see from several reports, the operating systems/software in organizations and enterprises are vulnerable to exploits which were patched years ago (like Eternal Blue used in WannaCry).Anyway, in MRG Effitas 360 Degree Assessment&nbsp; &amp; Certification tests the AV premium versions are tested (except Defender), which often have anti-exploit modules, so they can protect better than Defender on Windows 10 with default settings. In the Exploit/Fileless test, Defender could compete with premium AVs only with activated advanced settings, especially ASR rules.</blockquote>

[QUOTE="Andy Ful, post: 847325, member: 32260"] Defender and the Exploit/Fileless test. Unfortunately, MRG Effitas uses Windows 7 and Windows 10 in this test, even when in the methodology section only Windows 7 is mentioned. There is no way to know from the report, how many samples require Windows 10. Of course, the samples which were run on Windows 7 cannot be stoped by Defender, because it is not an antivirus (only anti-spyware engine is present). In the Exploit/Fileless test, Windows 7 is used because it is a common Windows version in organizations and enterprises. As we can see from several reports, the operating systems/software in organizations and enterprises are vulnerable to exploits which were patched years ago (like Eternal Blue used in WannaCry). Anyway, in MRG Effitas 360 Degree Assessment & Certification tests the AV premium versions are tested (except Defender), which often have anti-exploit modules, so they can protect better than Defender on Windows 10 with default settings. In the Exploit/Fileless test, Defender could compete with premium AVs only with activated advanced settings, especially ASR rules. [/QUOTE]

Verification