X hits on this document

PDF document

FDCC_USGCB-Overcoming_Technical_Challenges_in_the_Windows_Baselines.pdf - page 4 / 29

82 views

0 shares

0 downloads

0 comments

4 / 29

  • Do not process the legacy Run list

    • Was: Enabled

    • Now: Not defined

    • Blocks execution of applications at

      • HKLM\Software\Microsoft\Windows\CurrentVersion\R un

    • Minor speed-bump for malware

      • Requires admin rights to modify the key

      • Dozens of other ways to launch malware at startup if you have admin rights

    • Impact: Numerous legitimate apps

Document info
Document views82
Page views82
Page last viewedThu Dec 08 12:47:55 UTC 2016
Pages29
Paragraphs379
Words1127

Comments