5 ms·

Nice that you bring it up as it actually makes system more secure than less secure. MS Windows Defender also has extensive cloud protection enabled: https://do

by jve 4y ago

Nice that you bring it up as it actually makes system more secure than less secure. MS Windows Defender also has extensive cloud protection enabled: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/cloud-protection-microsoft-defender-antivirus?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/security/defe... Which of course can be disabled. CLR check can also be disabled on windows if someone wants less requests from hosts and could be harmless for some specific configurations.

57FkMytWjyFu 4y ago
Spoken like someone that's never actually tried to disable Defender.
- jve 4y ago
  Yes, at our org we actually roll out/enable protections step-by-step and monitor the impact. We are conservative on cloud dependencies, but Defender Cloud protection components is only one of the very few we opt-in. Obviously it's just one tool in a toolbox, but under that umbrella there are very much protections that are very useful. Tip of the day: Did you know that there are Attack surface reduction rules that can be enabled to, for example "Block Office communication application from creating child processes" https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/attack-surface-reduction-rules-reference?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/security/defe... ? :)
  - 57FkMytWjyFu 4y ago
    I'm speaking as an end user, not from an organizational perspective. Have you ever tried to disable Defender? Just letting you know it's not nearly as simple as a checkbox.
user3939382 4y ago
> it actually makes system more secure than less secure More secure in the way my home would be more secure if I had a cop permanently stationed in my living room. I'll secure my own machine, thank you very much.
- simonh 4y ago
  That’s fine, Macos users are free to make that choice, but for some of us a bit if additional private security is handy.

by jve 4y ago

57FkMytWjyFu 4y ago

Spoken like someone that's never actually tried to disable Defender.

jve 4y ago
Yes, at our org we actually roll out/enable protections step-by-step and monitor the impact. We are conservative on cloud dependencies, but Defender Cloud protection components is only one of the very few we opt-in. Obviously it's just one tool in a toolbox, but under that umbrella there are very much protections that are very useful. Tip of the day: Did you know that there are Attack surface reduction rules that can be enabled to, for example "Block Office communication application from creating child processes" https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/attack-surface-reduction-rules-reference?view=o365-worldwide https://docs.microsoft.com/en-us/microsoft-365/security/defe... ? :)
- 57FkMytWjyFu 4y ago
  I'm speaking as an end user, not from an organizational perspective. Have you ever tried to disable Defender? Just letting you know it's not nearly as simple as a checkbox.

user3939382 4y ago

> it actually makes system more secure than less secure More secure in the way my home would be more secure if I had a cop permanently stationed in my living room. I'll secure my own machine, thank you very much.

simonh 4y ago
That’s fine, Macos users are free to make that choice, but for some of us a bit if additional private security is handy.