Metasploit 3.2 Makes AV Look Silly | DiD is the Only Answer
By Daniel Miessler on January 14th, 2009: Tagged as Information Security
Three words: Don’t. Trust. AV.
Bypassing AV with Metasploit from John Strand on Vimeo.
- Least privilege
- Ingress/Egress filtering
- NIP/DS
- HIP/DS
- For all of those, log your ass off
- Most importantly, read the logs
If you’re not doing most of these things, and you have something on your network worth selling, you are probably a source of income for someone with an accent. ::
