Windows EDR - Tamper Protection Improvements - Prevent Windows Firewall Tampering
this quarter
James Mason | SE @ Huntress
Adding Firewall rule monitoring to have visibility to when an attacker attempts to block comms with Huntress, enhancing logs to lead to Detectors that'll alert us to potential tampering and locking down the uninstall process even further