Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 980405" data-attributes="member: 32260">For casual users, the best Adobe Acrobat Reader settings are probably the default ones (Protected View = OFF) and additionally:<ol>
<li data-xf-list-type="ol">Disable JavaScript.</li>
<li data-xf-list-type="ol">Disable opening of non-PDF file attachments with external applications.</li>
<li data-xf-list-type="ol">Block PDF files to all web sites.</li>
<li data-xf-list-type="ol">Enable Defender&#039;s ASR rule for Adobe.</li>
</ol>Even if the user will enable JavaScript for the document, it will run in AppContainer. Acrobat Reader cannot use opening non-PDF attachments in external applications or URLs embedded in the documents, and cannot run other applications/LOLBins.When one uses Protected View and the Defender&#039;s ASR rule, then after using &quot;Enable All Features&quot;, the protection is also OK. But URLs will be opened in the web browser.The Protected View, especially without the Defender ASR rule, is not good for casual users.</blockquote>

[QUOTE="Andy Ful, post: 980405, member: 32260"] For casual users, the best Adobe Acrobat Reader settings are probably the default ones (Protected View = OFF) and additionally: [LIST=1] [*]Disable JavaScript. [*]Disable opening of non-PDF file attachments with external applications. [*]Block PDF files to all web sites. [*]Enable Defender's ASR rule for Adobe. [/LIST] Even if the user will enable JavaScript for the document, it will run in AppContainer. Acrobat Reader cannot use opening non-PDF attachments in external applications or URLs embedded in the documents, and cannot run other applications/LOLBins. When one uses Protected View and the Defender's ASR rule, then after using "Enable All Features", the protection is also OK. But URLs will be opened in the web browser. The Protected View, especially without the Defender ASR rule, is not good for casual users. [/QUOTE]

Verification