Out of sight but not invisible: Defeating fileless malware

Re:Out of sight but not invisible: Defeating fileless malware by lisk1 on Saturday April 27, 2019 @12:06PM (#19766186)

As don't mind this type of articles informative and thorough, the excess use of "Windows Defender ATP" makes me think they are trying to put suggestion in the readers mind. Can we count how many times "Windows Defender ATP" is used?

[ Parent | on HN ]

Re:Out of sight but not invisible: Defeating fileless malware by 13of40 on Saturday April 27, 2019 @01:02PM (#19766467)

I think they have to specify "Windows Defender ATP" because "ATP" is overloaded. There's also "Microsoft Office 365 ATP".

[ Parent | on HN ]

Re:Out of sight but not invisible: Defeating fileless malware by jmartinpetersen on Saturday April 27, 2019 @12:13PM (#19766227)

37. That maybe seems a bit heavy.

Edit: 38 with the image link at the bottom.

[ Parent | on HN ]

Re:Out of sight but not invisible: Defeating fileless malware by basetop on Saturday April 27, 2019 @12:45PM (#19766384)

I count 45 if we include variations like "Windows Defender AV", "Windows Defender Security Center", etc.

Example from article : "Windows Defender ATP alert showing how detection of the Sharpshooter technique by Windows Defender AV is surfaced in Windows Defender Security Center"

And that's not including the text embedded in the images themselves - like the image of the event log ( Event 1127 - Windows Defender ).

You can't scroll through the article without a mention of Windows Defender. I don't know if they did it purposefully or not, but I'd say it was intentional. Hard to believe it was accidental.

[ Parent | on HN ]