View Full Version : Block processes from being read
Jazcat
April 12th, 2007, 09:44 PM
I apologise if this has been asked before but I cannot find any references using the forum search.
I’ve just started using AppDefend after coming over from ProcessGuard, what I’d like to know is how you can get AD to block processes from reading other running system processes, eg. Adobe Acrobat reader scans all running system processes but I could disallow and block it using processguard.
Jason_R0
April 16th, 2007, 11:45 AM
-{ Quote: "I apologise if this has been asked before but I cannot find any references using the forum search.
I’ve just started using AppDefend after coming over from ProcessGuard, what I’d like to know is how you can get AD to block processes from reading other running system processes, eg. Adobe Acrobat reader scans all running system processes but I could disallow and block it using processguard." }-
Blocking apps from reading other apps is really a rather "geek" feature which is why I removed it from AD. That and I hoped companies like PunkBuster would realize AD couldn't be used to block "hacks" without that feature so they wouldn't be blacklisting the driver. But I had too much faith in such companies, so I will probably be bringing back those kind of features eventually, as I like to use them also for testing certain things.
Kegel
April 16th, 2007, 06:46 PM
Good idea as it has done nothing to stop the problems associated with AD and PB. The two are still not compatable.
Jazcat
April 16th, 2007, 11:20 PM
-{ Quote: "Blocking apps from reading other apps is really a rather "geek" feature which is why I removed it from AD. That and I hoped companies like PunkBuster would realize AD couldn't be used to block "hacks" without that feature so they wouldn't be blacklisting the driver. But I had too much faith in such companies, so I will probably be bringing back those kind of features eventually, as I like to use them also for testing certain things." }-
Yes that "geek" feature is the major component that i'm after, I need a replacement for ProcessGuard and will be purchasing a registered copy of AD if you reintroduce the block process read functionality. Love your work keep it up :)
AJohn
April 28th, 2007, 02:34 AM
Stop taking away features from us y0z :P
vBulletin® Copyright ©2000-2012, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2012, Wilders Security Forums