Or a smartphone?
Serious Discussion Which layer of defense contributes the most to your overall security?
-
Thread starter
RoboMan
- Start date
- 31 Replies
- 3,287 Views
- Featured
You think kingpins go near a phone or computer in a country that allows extradition? Probably not.
But to be a silver bullet, it has to stop hackers too.
I think asking for the major defense technology used only answers the real question partially. The real question is - how do we stop attacks?
Since we can't know of all the attack vectors and 0 days, my approach is to address the methods of obtaining persistence. When the attacker cannot obtain persistence, then her efforts will be in vain. She can land on my box, but she can't do anything.
Use Application Control, that will take care of denying foreign executables. Then take care of interpreters running foreign scripts. Then take care of denying LoLBins. Additionally restrict exe's from running from user writable paths. Just go down the list of Mtre Attack's Persistence column. They are all mitigatable IMHO. That's the game plan to follow.
It is systematic, and addresses all known persistence TTPs in automated malware and hand-on-keyboard adversary attacks..
Considering that the Shadowra Dec 2025 Kaspersky test "Kaspersky leaves 21 files out of 85, which is a good score." That leaves us unprotected against ~21 threats at any point in time, I think my approach is a sensible action to take.
Since we can't know of all the attack vectors and 0 days, my approach is to address the methods of obtaining persistence. When the attacker cannot obtain persistence, then her efforts will be in vain. She can land on my box, but she can't do anything.
Use Application Control, that will take care of denying foreign executables. Then take care of interpreters running foreign scripts. Then take care of denying LoLBins. Additionally restrict exe's from running from user writable paths. Just go down the list of Mtre Attack's Persistence column. They are all mitigatable IMHO. That's the game plan to follow.
It is systematic, and addresses all known persistence TTPs in automated malware and hand-on-keyboard adversary attacks..
Considering that the Shadowra Dec 2025 Kaspersky test "Kaspersky leaves 21 files out of 85, which is a good score." That leaves us unprotected against ~21 threats at any point in time, I think my approach is a sensible action to take.
Last edited:
Please explain to us how an Adblocker provides better protection then the other programs/practises mentioned in this thread. Thanks.
Last edited:
For me on Linux the best are the sandboxes (AppArmor, Firejail and Flatpak).
Wait until the girlfriend becomes the wife. Then see if the defense becomes aggressive or a bit relax. HeheDefinitely my girlfriend's intuition—no girlor hacker stands a chance!
They say... WIFE is the ultimate hacker—WorriesInvitedForEver!
Last edited:
MalwareTips community
Join the discussion
Create a free account to reply to this thread, ask your own questions and get help from the community.
- Reply and ask questions
- Get alerts when someone answers
- Free malware removal help
Recently browsing
Members who viewed this thread in the last 5 minutes
