X hits on this document

PDF document

FDCC_USGCB-Overcoming_Technical_Challenges_in_the_Windows_Baselines.pdf - page 4 / 29

96 views

0 shares

0 downloads

0 comments

4 / 29

  • Do not process the legacy Run list

    • Was: Enabled

    • Now: Not defined

    • Blocks execution of applications at

      • HKLM\Software\Microsoft\Windows\CurrentVersion\R un

    • Minor speed-bump for malware

      • Requires admin rights to modify the key

      • Dozens of other ways to launch malware at startup if you have admin rights

    • Impact: Numerous legitimate apps

Document info
Document views96
Page views96
Page last viewedTue Jan 17 23:38:55 UTC 2017
Pages29
Paragraphs379
Words1127

Comments