3 ms·

>but also that Windows is so popular in business, causing it to be the most aggressively attacked platform Yep, ransomware does nothing more than encrypting fi

>but also that Windows is so popular in business, causing it to be the most aggressively attacked platform Yep, ransomware does nothing more than encrypting files users have read/write access to. The OS is not the limiting factor here. The access scope of users does. It really comes down to company IT and how they scope access (and lock down accounts with broader access like they are supposed to).

hooverd 3y ago
Solution: Don't let the user read or write files without requesting approval from their supervisor.
- mr_mitm 3y ago
  Also: prevent privilege escalation. That's the big issue every admin of Active Directory struggles with. I work as a pentester and we get domain admin rights within days (sometimes minutes) in about 95% of all engagements.
  - hooverd 3y ago
    All the coal EDR software is burning, and yet...