Reply to thread

Message

<blockquote data-quote="danb" data-source="post: 996204" data-attributes="member: 62850">I will keep an eye out for this to see if I can notice what you are talking about, in the meantime, can you please send me a couple of examples?One thing to keep in mind that I have always want to discuss, which everyone knows but are usually not cognizant of.&nbsp; If a file is not signed (and verified), it should never be ran on any computer unless you know EXACTLY where that file came from.&nbsp; In other words, when you execute an unsigned file, you are running executable code on your machine that you have no idea who wrote or where it came from.&nbsp; This is why VS does not automatically allow by sigs alone.&nbsp; It reminds me of the early days with my VIC 20 and C64 when I would log into BBS&#039;s to download games and other programs.&nbsp; I remember always thinking &quot;I have to be careful what I download because they might play a trick on me.&quot;&nbsp; I should have started VS then <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite110" alt=";)" title="Wink&nbsp; &nbsp; ;)" loading="lazy" data-shortname=";)" />.We definitely need WLC enabled in the User Prompt because it is extremely adept of catching what VoodooAi might miss.&nbsp; But as far as the WLC realtime scan, you can go either way on this.&nbsp; Basically, the idea of the WLC realtime scan is to let the end user know at any given time that only safe items are executing on their machine.&nbsp; It is also useful in discovering malicious files that originate from an insider or supply chain attack, although these attacks are quite uncommon.</blockquote>

[QUOTE="danb, post: 996204, member: 62850"] I will keep an eye out for this to see if I can notice what you are talking about, in the meantime, can you please send me a couple of examples? One thing to keep in mind that I have always want to discuss, which everyone knows but are usually not cognizant of. If a file is not signed (and verified), it should never be ran on any computer unless you know EXACTLY where that file came from. In other words, when you execute an unsigned file, you are running executable code on your machine that you have no idea who wrote or where it came from. This is why VS does not automatically allow by sigs alone. It reminds me of the early days with my VIC 20 and C64 when I would log into BBS's to download games and other programs. I remember always thinking "I have to be careful what I download because they might play a trick on me." I should have started VS then ;). We definitely need WLC enabled in the User Prompt because it is extremely adept of catching what VoodooAi might miss. But as far as the WLC realtime scan, you can go either way on this. Basically, the idea of the WLC realtime scan is to let the end user know at any given time that only safe items are executing on their machine. It is also useful in discovering malicious files that originate from an insider or supply chain attack, although these attacks are quite uncommon. [/QUOTE]

Verification