Reply to thread

Message

<blockquote data-quote="ForgottenSeer 58943" data-source="post: 700681">The thing is, enterprise/corporate can be secured better than most home users simply by virtue of Windows Pro, AD, Radius and GP control, VDOMS, VLANS and active SIEM. It isn&#039;t uncommon in for us to push out GPs that disable windows scripting, .net, and whatever else the environment needs. Out of the box Windows is incredibly insecure, it can be made &#039;somewhat&#039; secure in a controlled enterprise environment. Once that is done an endpoint AV is dropped on the systems and the whole kit is put behind a UTM/NGFW and things are much more secure.This is how we operate in a management environment with 33,000 endpoints and not spend 24/7 doing malware cleanups and ransomware removals. Of course with a targeted attack all bets are off. A threat actor will observe, probe and patiently craft a specific attack to intrude on the network. However getting into a network and moving laterally within the network are two very different things even for a skilled attacker. If you want to keep most intruders out you&#039;ll prevent laterally movement with tagged VLANS and policy based routing, control ingress/egress and setup policy limitations.</blockquote>

[QUOTE="ForgottenSeer 58943, post: 700681"] The thing is, enterprise/corporate can be secured better than most home users simply by virtue of Windows Pro, AD, Radius and GP control, VDOMS, VLANS and active SIEM. It isn't uncommon in for us to push out GPs that disable windows scripting, .net, and whatever else the environment needs. Out of the box Windows is incredibly insecure, it can be made 'somewhat' secure in a controlled enterprise environment. Once that is done an endpoint AV is dropped on the systems and the whole kit is put behind a UTM/NGFW and things are much more secure. This is how we operate in a management environment with 33,000 endpoints and not spend 24/7 doing malware cleanups and ransomware removals. Of course with a targeted attack all bets are off. A threat actor will observe, probe and patiently craft a specific attack to intrude on the network. However getting into a network and moving laterally within the network are two very different things even for a skilled attacker. If you want to keep most intruders out you'll prevent laterally movement with tagged VLANS and policy based routing, control ingress/egress and setup policy limitations. [/QUOTE]

Verification