3 ms·
Tamper protection is really meant for enterprise. Disabling it is exactly as hard as gaining privilege escalation. It is harder to achieve in AD (of course atta
by aj3 6y ago
Tamper protection is really meant for enterprise. Disabling it is exactly as hard as gaining privilege escalation. It is harder to achieve in AD (of course attackers gain lateral movement opportunities instead, but that's a different story), so Tamper protection makes sense there as an additional "security in depth" layer. At home where the logged in user is likely an admin already (even if "protected" by run as / UAC), tamper protection doesn't really add much apart from breaking existing exploit kits and requiring attackers to invest into new ones.