Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 1119975" data-attributes="member: 32260">When you open WHHLight for the first time it automatically applies the default restrictions.It is not for less informed users. However, the less informed user can become more informed after reading the help and documentation included in the WHHLight package.The effectiveness can depend on some other factors. The overall protection rate is similar to Microsoft Defender + Smart App Control, Comodo Firewall (Proactive profile) + Microsoft Defender, or Kaspersky (paid) with [USER=36043]@harlan4096[/USER] settings.The attack vectors like DLL hijacking, Macros, or weaponized shortcuts, can skirt around the Comodo Auto-containment. However, Comodo Firewall + Microsoft Defender (or any good AV) can prevent/detect/block almost all attacks at home. Adding something else can improve the protection a little, but the setup will be overcomplicated.Adding the WHHLight (SWH OFF, WDAC ON) can mainly improve the prevention of DLL hijacking. After enabling SWH, protection against weaponized shortcuts and some fileless attacks will be also added.</blockquote>

[QUOTE="Andy Ful, post: 1119975, member: 32260"] When you open WHHLight for the first time it automatically applies the default restrictions. It is not for less informed users. However, the less informed user can become more informed after reading the help and documentation included in the WHHLight package. The effectiveness can depend on some other factors. The overall protection rate is similar to Microsoft Defender + Smart App Control, Comodo Firewall (Proactive profile) + Microsoft Defender, or Kaspersky (paid) with [USER=36043]@harlan4096[/USER] settings. The attack vectors like DLL hijacking, Macros, or weaponized shortcuts, can skirt around the Comodo Auto-containment. However, Comodo Firewall + Microsoft Defender (or any good AV) can prevent/detect/block almost all attacks at home. Adding something else can improve the protection a little, but the setup will be overcomplicated. Adding the WHHLight (SWH OFF, WDAC ON) can mainly improve the prevention of DLL hijacking. After enabling SWH, protection against weaponized shortcuts and some fileless attacks will be also added. [/QUOTE]

Verification