4 ms·
Does SSL-Decryptand and rules-based analysis work? These are the times I've interacted with them: 1. Disabling SSL-Decrypt because it blocks HTTPS from PowerShe
by AyyWS 5y ago
Does SSL-Decryptand and rules-based analysis work? These are the times I've interacted with them:
1. Disabling SSL-Decrypt because it blocks HTTPS from PowerShell, bash, git, android studio and other comandline tools where I couldn't figure out how to trust our internal cert. I figured it out for Postman, but mostly I just couldn't figure it out.
2. Disabling or exempting rules that blocked our pharmacy app from going to webpages or perform SQL Queries that included legal drug names that were also illegal drug names.
I think it's tough for non-security professionals who feel burdened and never get to see the benefits.
- jason-phillips 5y agoDefine "work". It's a layer in your overall plan. You should be able to apply it selectively and tweak as appropriate. If an internal resource is exfiltrating information somehow, the goal is to uncover that activity.