Interesting idea: https://linuxplumbersconf.org/event/7/contributions/739/attachments/655/1204/LPC-MC_DRTM_Advanced_Applications.pdf …pic.twitter.com/zVkoetrJvC
Show this thread
-
Thats what uefi lock is for, as I said you should read the docs
okay- so you are saying its not the end user you are protecting? Or do you want my mom to read UEFI docs to avoid getting infected?
-
-
I dont think many people get the current landscape of 3 letter acronym protection policies and what defender XXXX is currently or what it protects. There is now- what 3 different technologies to reject a driver from loading. Kernel-Mode Code Signing Policy, authenticode and HVIC
-
and the undocumented blacklist in drvmain.sdb that is enforced when enabling isolated core.
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.