Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 1059507" data-attributes="member: 32260">It is true that for many users, the &quot;WDAC-alone&quot; security cannot be as flexible/usable as the CyberLock. <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite130" alt="(y)" title="Thumbs up&nbsp; &nbsp; (y)" loading="lazy" data-shortname="(y)" />The security offered by CyberLock is significantly different. Microsoft implemented the &quot;intelligent parent-child processes security&quot; in Defender (some ASR rules, etc.). If you like to compare something, it should be: AV + CyberLock vs. MS Defender (paid or tweaked) + WDAC (AppLocker).Yes, you are missing about 90% of WDAC capabilities. Among many things, WDAC can block loading a specific DLL by a chosen executable.Blocking the path is only one of many other possibilities. People can use WDAC without path rules.WDAC works differently. The cowboys in the Wild West could efficiently kill people without tons of rules and techniques used by the Samurai.I think that both CyberLock and WDAC can be helpful for some people. A simple example is you and [USER=98858]@SpyNetGirl[/USER].I do not think it would be possible to prove the general superiority of CybeeLock over WDAC and vice versa (the exception in advantage of WDAC can be some Enterprises). You could try to prove that football is superior to baseball with the same effect.Post edited.</blockquote>

[QUOTE="Andy Ful, post: 1059507, member: 32260"] It is true that for many users, the "WDAC-alone" security cannot be as flexible/usable as the CyberLock. (y) The security offered by CyberLock is significantly different. Microsoft implemented the "intelligent parent-child processes security" in Defender (some ASR rules, etc.). If you like to compare something, it should be: [COLOR=rgb(0, 168, 133)][B] AV + CyberLock[/B][/COLOR] vs. [B][COLOR=rgb(41, 105, 176)]MS Defender (paid or tweaked) + WDAC (AppLocker).[/COLOR][/B] Yes, you are missing about 90% of WDAC capabilities. Among many things, WDAC can block loading a specific DLL by a chosen executable. Blocking the path is only one of many other possibilities. People can use WDAC without path rules. WDAC works differently. The cowboys in the Wild West could efficiently kill people without tons of rules and techniques used by the Samurai. I think that both CyberLock and WDAC can be helpful for some people. A simple example is you and [USER=98858]@SpyNetGirl[/USER]. I do not think it would be possible to prove the general superiority of CybeeLock over WDAC and vice versa (the exception in advantage of WDAC can be some Enterprises). You could try to prove that football is superior to baseball with the same effect. Post edited. [/QUOTE]

Verification