How do you test your policies and AV?

[Uber22]

Hey all

 

I was thinking of taking a pc of the network and testing our AV with key logger ,crypto locker etc anyone else done this before. Do you have list of stuff to test on students accounts ?

 

Thanks

[eddyc]

Hey all

 

I was thinking of taking a pc of the network and testing our AV with key logger ,crypto locker etc anyone else done this before. Do you have list of stuff to test on students accounts ?

 

Thanks

 

I’ve used Ransim before, Intercept X killed it straight off as soon as it was launched

[mavhc]

Just block all software except stuff you've installed from running, will stop 99% of stuff without even bothering AV. SRP/Applocker for Windows computers

[RLR]

Just block all software except stuff you've installed from running, will stop 99% of stuff without even bothering AV. SRP/Applocker for Windows computers

 

This is something I'm about to look into. Did you install all the software you use on a test machine to create the Rules for applocker? Or do you just allow everything in the Program File folders to be ran?

[mavhc]

Everything in program files, program files x86, and windows, plus the installer network share is an ok start, also want to increase the list of blocked stuff.

 

Main problem is programming classes, got to work with the teachers to find out what kinds of code they need pupils to create and execute