Reply to thread

Message

<blockquote data-quote="ForgottenSeer 95367" data-source="post: 1005065">[USER=32260]@Andy Ful[/USER] , I wonder to what extent Intelligence Security Graph (ISG) for WDAC overlaps or is one-in-the-same as &quot;Defender Reputation AI&quot; to be used in Smart Application Control?Microsoft is surely playing word games for marketing purposes as it normally does - calling the same thing by different names. Also, Microsoft is relabeling old tech (ML analytics) as something new (AI array). Same trickery as &quot;Next Gen&quot; this or that, when in fact, it&#039;s just the same thing that has been used for a long time.After reading this very closely multiple times, I&#039;m convinced of it:[ATTACH=full]269492[/ATTACH]NOTE how Microsoft might try to solve the DLL hell problem...&quot;If the file with good reputation is an application installer, the installer&#039;s reputation will pass along to any files that it writes to disk. This way, all the files needed to install and run an app inherit the positive reputation data from the installer.&quot;It makes sense now that Microsoft would want a long period of SAC running in evaluation mode to collect the required telemetry and set policies for all files written to disk for known good application installers.</blockquote>

[QUOTE="ForgottenSeer 95367, post: 1005065"] [USER=32260]@Andy Ful[/USER] , I wonder to what extent Intelligence Security Graph (ISG) for WDAC overlaps or is one-in-the-same as "Defender Reputation AI" to be used in Smart Application Control? Microsoft is surely playing word games for marketing purposes as it normally does - calling the same thing by different names. Also, Microsoft is relabeling old tech (ML analytics) as something new (AI array). Same trickery as "Next Gen" this or that, when in fact, it's just the same thing that has been used for a long time. After reading this very closely multiple times, I'm convinced of it: [ATTACH type="full" alt="1663889717538.png"]269492[/ATTACH] [COLOR=rgb(44, 130, 201)][SIZE=4]NOTE how Microsoft might try to solve the DLL hell problem...[/SIZE][/COLOR] [B]"If the file with good reputation is an application installer, the installer's reputation will pass along to any files that it writes to disk. This way, all the files needed to install and run an app inherit the positive reputation data from the installer." It makes sense now that Microsoft would want a long period of SAC running in evaluation mode to collect the required telemetry and set policies for all files written to disk for known good application installers.[/B] [/QUOTE]

Verification