Reply To: It’s not just EXEs that can be malware. Does WLC take note of other stuff?

Forums WhitelistCloud Support Forum General WhitelistCloud Discussions It’s not just EXEs that can be malware. Does WLC take note of other stuff? Reply To: It’s not just EXEs that can be malware. Does WLC take note of other stuff?

    gorblimey
    Participant
    none
    “… so it will at a minimum disrupt the attack chain, rendering the attack useless.”

    Absolutely.  We saw just that with WannaCry: break the chain, the attack fails.  OK, some links are better to break than others, but whatever chain-link stops the payload is arguably the best link.

    VS already has the capability without compromising the system, so yes we need to be ultra-careful about adding extra stuff.  My own preference — and actions — would be to light up a known performer like EEK or ZAM to have a shufti and do what they do best.

    _________________________________

    Understanding the scope of the problem is the first step on the path to true panic. [Florence Ambrose, "Freefall"]
    1
    0