Critical System Protection

 View Only

  • 1.  Using CSP to protect against Confiker

    Posted Oct 07, 2010 09:26 AM

    HI.

    I Am looking for a best pratice answer to using CSP to slow dow or stop confiker.

    Using a very modified core policy.

    Thanks



  • 2.  RE: Using CSP to protect against Confiker

    Posted Oct 07, 2010 06:38 PM

    Our test show both Core (when control modifcation of exec is enabled) and Strict does this automatically.

     

    Conficker is quite old are you sure you are not dealing with Stuxnet. It would be interesting to post your research on here.