Reply to thread

Message

<blockquote data-quote="The_King" data-source="post: 941829" data-attributes="member: 88497">Blocking such scripts or exe from someone who wants to use windows admin tools for nefarious reasons and someone who wants to write his or her own custom code to perform the same action for whatever reason can probably result in a high rate of false detection by AV companies. Which can be detrimental to theirproducts because most users want to be protected and at the same time want their code to run without the AV getting in the way. Its probably a difficult balancingact for many AV companies.There is also the issue of&nbsp; window updates failing because your AV decided it was nefarious since it never seen netsh.exe being used that way in a previous update.AV interfering with windows updates is a thing, not long ago BitDefender blocked a windows security update because it thought it was a Trojan.Another question thanks to [USER=90893]@simalinga[/USER] for reminding me.How effective are hardware based firewalls that have a security policy to default block C2 traffic against ransomware attacks.</blockquote>

[QUOTE="The_King, post: 941829, member: 88497"] Blocking such scripts or exe from someone who wants to use windows admin tools for nefarious reasons and someone who wants to write his or her own custom code to perform the same action for whatever reason can probably result in a high rate of false detection by AV companies. Which can be detrimental to their products because most users want to be protected and at the same time want their code to run without the AV getting in the way. Its probably a difficult balancing act for many AV companies. There is also the issue of window updates failing because your AV decided it was nefarious since it never seen netsh.exe being used that way in a previous update. AV interfering with windows updates is a thing, not long ago BitDefender blocked a windows security update because it thought it was a Trojan. Another question thanks to [USER=90893]@simalinga[/USER] for reminding me. How effective are hardware based firewalls that have a security policy to default block C2 traffic against ransomware attacks. [/QUOTE]

Verification