Tamper Protection for exclusions in Microsoft Defender for Endpoint | Cybersecurity World

Описание: Antivirus exclusions can do a lot of damage because what is in the exclusions is not monitored and possibly blocked. Exclusions should only be put in with great circumspection and there should be as few exclusions as possible.

Threat actors may try to create their own exclusions within various malware to allow them to run other malware and thus extend their control over the device. Therefore, exclusions need to be carefully protected and fully controlled.

Full blog article: https://www.cswrld.com/2023/11/tamper...

Follow me for more!
Blog: https://www.cswrld.com/
LinkedIn:   / lukasberan  
Bluesky: https://bsky.app/profile/lukasberan.com
Twitter / X: https://x.com/lukasberancz