PaulDotCom mailing list archives

File checker tool?


From: jorgeao at gmail.com (Jorge A. Orchilles)
Date: Sun, 21 Mar 2010 16:26:47 -0400

If you are looking for software whitelisting then AppLocker (new name in
Windows 7 and 2008 R2 from Software Restriction Policy) is the best bet.
Whitelisting will allow the admin to set what applications can run or
install based on file name (not recommended) or hash. Enable this in a lab
environment first as it will most likely break everything at first until you
get all the rules in. You can also use blacklisting if you have a good
reliable resource for bad hashes but we all know how easy it is to bypass
that.

Best Regards,
Jorge Orchilles
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20100321/9b28d34c/attachment.htm 


Current thread: