3 ms·
There’s a lot more footguns for attackers on modern windows than other operating systems. Most can be bypassed (EDR, AV, AMSI, ETW, UAC, controlled folders, App
by tsujamin 3y ago
There’s a lot more footguns for attackers on modern windows than other operating systems. Most can be bypassed (EDR, AV, AMSI, ETW, UAC, controlled folders, App Control, block at first site etc), but it definitely raises the bar if your end goal is very low likelihoods of detection.
Put differently: the gauntlet you have to run on Windows (and to a lesser extent macOS I imagine) is much longer
- marcosdumay 3y agoHum... Did Microsoft ever isolate their development infrastructure from the one that was compromised by Solar Winds? They never even tried to claim they did something about it. Anyway, half of those acronyms have more vulnerabilities than Windows on a normal computer.