SoylentNews is people
SoylentNews
from the will-it-detect-windows-installers? dept.
Arthur T Knackerbracket has found the following story:
Hey, Linux fans! Microsoft has got your back over fileless threats. Assuming you've bought into the whole Azure Security Center thing.
Hot on the heels of a similar release for Windows (if by "hot" you mean "nearly 18 months after") comes a preview aimed at detecting that breed of malware that inserts itself into memory before attempting to hide its tracks.
[...] Microsoft's detection feature scans the memory of all processes for the tell-tale footprint of a fileless toolkit, shrieking a warning in the Azure Security Center along with some details of the nasty. An admin can then decide what action to take (and what further investigation is needed).
The scan, according to the Windows giant, is not invasive and the "vast majority" take less than five seconds to run. More importantly for the those fearful of slurpage, memory analysis is performed on the host itself and the results only contain "security-relevant metadata and details of suspicious payloads".
(Score: 3, Funny) by Anonymous Coward on Wednesday February 26 2020, @09:18PM (2 children)
Tragic Joke:
"What's the difference between Microsoft and Malware?"
"You can't tell the difference either, eh?"
(Score: 0) by Anonymous Coward on Wednesday February 26 2020, @11:39PM (1 child)
One is butt-hurt that you pay for, the other one isn't!
(Score: 2) by Grishnakh on Thursday February 27 2020, @03:07AM
Well, most Windows-based malware these days seems to be "ransomware", where they lock up your files and get you to send them BTC to decrypt them.
So, more accurately, one is something you pay for up-front, the other is free at first, but charges you later.