Reply to thread

Message

<blockquote data-quote="ForgottenSeer 97327" data-source="post: 1017080">Large cloud based whitelists are fine to establish your baseline (I use Microsoft Defender on MAX for that), smaller local whitelists are great to maintain your baseline (not only allowing installed programs to update, but also allowing programs of same signing to install (I use WDAC for that). VoodooShield also has both, this makes it easier and safer to lockdown. The local whitelist makes this a tight custom tailored solution, while still allowing your baseline to update and extend (adding new programs of already trusted signers).I think the benefit of VoodooShield is that you can start using it in auto pilot mode using it as an advanced user controllable addition to Microsodt Defender, tighten your security by moving on to smart mode. After your local whitelist is build, you can move to the highest security level always. There are not that many default deny applications offering usage modes which provide such an easy learning curve. Most only have training (which basically allows everything) and block mode (default deny). When I figured out my WDAC local whitelist in 2019, I borked my PC once (Microsoft co-signed generic driver passed the whitelist, but the vendors&#039;latest driver got blocked when I installed that after reading on this forum that it had patched some critical vulnerabilities).</blockquote>

[QUOTE="ForgottenSeer 97327, post: 1017080"] Large cloud based whitelists are fine to establish your baseline (I use Microsoft Defender on MAX for that), smaller local whitelists are great to maintain your baseline (not only allowing installed programs to update, but also allowing programs of same signing to install (I use WDAC for that). VoodooShield also has both, this makes it easier and safer to lockdown. The local whitelist makes this a tight custom tailored solution, while still allowing your baseline to update and extend (adding new programs of already trusted signers). I think the benefit of VoodooShield is that you can start using it in auto pilot mode using it as an advanced user controllable addition to Microsodt Defender, tighten your security by moving on to smart mode. After your local whitelist is build, you can move to the highest security level always. There are not that many default deny applications offering usage modes which provide such an easy learning curve. Most only have training (which basically allows everything) and block mode (default deny). When I figured out my WDAC local whitelist in 2019, I borked my PC once (Microsoft co-signed generic driver passed the whitelist, but the vendors'latest driver got blocked when I installed that after reading on this forum that it had patched some critical vulnerabilities). [/QUOTE]

Verification