App Review Shadowra's Big Comparative - Episode 3 Entreprise Antivirus

[carl fish]

Thanks for the tests.

For anyone who is interested in enterprise AV testing, the site of Mitre can be an extra help to compare products (ATT&CK® Evaluations).

no Cylance but I figured out what was wrong and i am now using it on my system it was the exploits settings it seems to detect a lot of good files as exploits

 

[VAR_123]

@Shadowra Eagerly waiting for the test 4, Final winner.✌

 

[Digmor Crusher]

Would anyone know if using Configure Defender and WHHL would be comparable to Microsoft Defender for Business? I was going to give it a quick test spin, they have a 30 day trial but need a credit card number.

 

[oldschool]

Would anyone know if using Configure Defender and WHHL would be comparable to Microsoft Defender for Business? I was going to give it a quick test spin, they have a 30 day trial but need a credit card number.

I think you'd need the enterprise edition of Windows, as I remember from a recent @bazang post. And, anyway, why bother with a trial when your current setup is more than enough?

 

[Digmor Crusher]

I think you'd need the enterprise edition of Windows, as I remember from a recent @bazang post. And, anyway, why bother with a trial when your current setup is more than enough?

Oh yah, I believe your right my friend. I was just curious, isn't that the MalwareTips way?

 

[oldschool]

Oh yah, I believe your right my friend. I was just curious, isn't that the MalwareTips way?

Indeed, but you are no way suffer with New AV Syndrome as some members. There is no effective vaccine at this time. Other than psychotherapy, we can only advise mindfulness meditation, yoga, and other holistic approaches to self-care.

 

[Shadowra]

@Shadowra Eagerly waiting for the test 4, Final winner.✌

I'm a bit behind schedule as I'm in the middle of shooting it.
But that's okay, because it's 2 antiviruses. So I can do everything today: shooting, editing and uploading.
And then we'll rest

 

[simmerskool]

Would anyone know if using Configure Defender and WHHL would be comparable to Microsoft Defender for Business? I was going to give it a quick test spin, they have a 30 day trial but need a credit card number.

a very good question -- MS got a credit card number from me and they'll billing me $3.95 every month, and I don't have Defender for Business installed! It has been a pain the ass for me to find the correct MS thing, person, entity... whatever to get it cancelled (partly my fault -- longer story not worth the effort) but if you do give them a card number keep those MS account credentials safe.

 

[Digmor Crusher]

Indeed, but you are no way suffer with New AV Syndrome as some members. There is no effective vaccine at this time. Other than psychotherapy, we can only advise mindfulness meditation, yoga, and other holistic approaches to self-care.

Well I'm not an anti-vaxxer so I'll just wait for the vaccine and instead of yoga while I'm waiting it will be beer instead.

 

[Digmor Crusher]

a very good question -- MS got a credit card number from me and they'll billing me $3.95 every month, and I don't have Defender for Business installed! It has been a pain the ass for me to find the correct MS thing, person, entity... whatever to get it cancelled (partly my fault -- longer story not worth the effort) but if you do give them a card number keep those MS account credentials safe.

That's why I only give out my card numbers when I have to, I'll pass on this for now.

 

[oldschool]

@Digmor Crusher

Indeed, but you are no way suffer with New AV Syndrome as some members.

This is also known clinically as AVHD, or AV Hyperactivity Disorder.

 

[Zero Knowledge]

Very informative. I like seeing these tests about enterprise EDR's. Where did you get the CrowdStrike seat from? I haven't seen it offered anywhere from resellers/MSP's.

 

[Shadowra]

Very informative. I like seeing these tests about enterprise EDR's. Where did you get the CrowdStrike seat from? I haven't seen it offered anywhere from resellers/MSP's.

Via @kamiloxf

 

[Zero Knowledge]

Ah I see thanks for the info

 

[Digmor Crusher]

@Digmor Crusher

This is also known clinically as AVHD, or AV Hyperactivity Disorder.

Sorry my friend, I hate to disappoint you, I gave Eset a test run tonight, it failed because I am looking for a easy, 1 program solution for protection. I've always been a proponent of using a multi layered solution such as an AV and a program such as Cyberlock, Osarmour or one of Andy's tools. But even these don't quite work as the person I share the computer with basically knows on/off for these type of programs. So I've yet to find the one program solution, Eset has way too many options, recommendations are welcome. For now its Defender with Configure Defender and Malwarebytes, both simple, quiet, easy and effective enough. Thanks.

 

[Behold Eck]

Sorry my friend, I hate to disappoint you, I gave Eset a test run ton ight, it failed because I am looking for a easy, 1 program solution for protection. I've always been a proponent of using a multi layered solution such as an AV and a program such as Cyberlock, Osarmour or one of Andy's tools. But even these don't quite work as the person I share the computer with basically knows on/off for these type of programs. So I've yet to find the one program solution, Eset has way too many options, recommendations are welcome. For now its Defender with Configure Defender and Malwarebytes, both simple, quiet, easy and effective enough. Thanks.

SEP is pretty much set and forget check this out App Review - Symantec Endpoint Protection

Regards Eck

 

[roger_m]

Sorry my friend, I hate to disappoint you, I gave Eset a test run tonight, it failed because I am looking for a easy, 1 program solution for protection.

You'll get very good protection with ESET, without changing any settings.

 

[Digmor Crusher]

I'll just continue doing what I have been doing for years now, flopping back and forth with Configure Defender, WHHL, Malwarebytes (lifetime) and Cyberlock ( lifetime) in various combinations. ( sshhh, don't tell oldschool)

 

[bazang]

I think you'd need the enterprise edition of Windows, as I remember from a recent @bazang post. And, anyway, why bother with a trial when your current setup is more than enough?

Enterprise versions of security software do not provide greatly improved security versus the consumer versions. If there is any increased benefit from the product technology and design, it is only incremental and therefore not the big improvement that people hope and want it to be.

The thing people never consider is that enterprise security products are designed for use in a structured environment that adheres to the security process. Meaning that security is not software. It is a process. It is that process that provides the security and not the software. The software is only a tiny part of it. All the administrative controls and oversight are the most important part of the security process. The security process also uses defense-in-depth which includes a lot of capabilities - people, processes, technologies, and behaviors.

Enterprise versions address issues such as deployability across a large, complex enterprise environment with a lot of device diversity and reports. There's always the reports that get reviewed in daily, weekly, monthly, quarterly, semi-annual, and annual meetings. Then those products support security impact analyses, security audits, self-assessments, and actual compliance IT audits.

Enterprises use things like authorized and approved software inventories (lists) and default-deny to prevent users from downloading and executing untrusted mobile code. If it is from the internet, then it is poison and prohibited. For enterprises and organizations with high security maturity - this is the enterprise system of security... continuous monitoring and a very strict continuous monitoring with iron fisted enforcement. "Users that want to use stuff" are not allowed to do what they want to do. There is no default allow and there is no ON/OFF capability because those are the things that lead of user-created compromise.

Home users don't do any of this. So they will be very disappointed in enterprise security software. They are actually wasting their money buying enterprise products.

 

[bazang]

But even these don't quite work as the person I share the computer with basically knows on/off for these type of programs.

Everybody knows ON/OFF for all security programs. It is the fundamental weakness of the "users want to use stuff" paradigm.

A user's ability to disable security and do stuff has to be taken away from them for security to be effective. This is very unpopular and in today's work, almost heresy, but people are always the problem. Always.