Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 1055808" data-attributes="member: 32260">The hybrid SRP + WDAC is natural in the home environment.In SRP, it is hard to separately whitelist/blacklist scripts and PE files. At home, the scripts can be blocked almost everywhere. This is not possible for PE and MSI files. So, you need different whitelists for them. This can be done in a simple way by using SRP + WDAC.You can do it with one click in WHHLight. I am only a human, and cannot handle too many applications. So, SWH will probably survive as a part of WHH.That is my plan (except for ISG and kernel drivers).You can get it in a simple way by removing 3 entries from the WDAC Whitelist.I will not add the policy for kernel drivers. WHHLight is for home administrators. Blocking kernel drivers would require some additional features like scanning for drivers, auditing, etc. Furthermore, Windows 10/11 has some driver protection that is probably sufficient at home.</blockquote>

[QUOTE="Andy Ful, post: 1055808, member: 32260"] The hybrid SRP + WDAC is natural in the home environment. In SRP, it is hard to separately whitelist/blacklist scripts and PE files. At home, the scripts can be blocked almost everywhere. This is not possible for PE and MSI files. So, you need different whitelists for them. This can be done in a simple way by using SRP + WDAC. You can do it with one click in WHHLight. I am only a human, and cannot handle too many applications. So, SWH will probably survive as a part of WHH. That is my plan (except for ISG and kernel drivers). You can get it in a simple way by removing 3 entries from the WDAC Whitelist. I will not add the policy for kernel drivers. WHHLight is for home administrators. Blocking kernel drivers would require some additional features like scanning for drivers, auditing, etc. Furthermore, Windows 10/11 has some driver protection that is probably sufficient at home. [/QUOTE]

Verification