4 ms·
Are you sure "Microsoft is responsible for that design"? Do we know Cloudstrike didn't choose to do it in-kernel even though there was another way they could h
by 1over137 2y ago
Are you sure "Microsoft is responsible for that design"? Do we know Cloudstrike didn't choose to do it in-kernel even though there was another way they could have done it in userspace?
- ochronus 2y agoYes, as in: allowing (well, requiring?) drivers to run in kernel mode.
- bongodongobob 2y agoIt's AV though, if it didn't, it'd be useless.
- ochronus 2y agoIn the current architecture, yes. What I'm saying is that architecture is wrong.