Jump to content
Lfei3

Anti Exploit and secondary processes

Recommended Posts

I am trying to add additional processes for the anti exploit module.  Many exe spawn additional processes and I am wondering how I should add them manually or if I need to at all.  For example Firefox is already added and I assume that add plugin container.exe that spawns from Firefox.  EMET requires manually adding the secondary processes.

Now I want to add Thunderbird to the anti exploit list which also has plugin container.exe.  Do I need to manually add plugin container.exe along with the Thunderbird.exe to be properly protected?

There are other programs that spawn secondary processes so I would like a conclusive answer.

Share this post


Link to post
Share on other sites

MB protection for Firefox includes the add-ons as well, no need to add it separately. Keep in mind that it is for the Thunderbird add-ons and not for the actual Thunderbird email program. If Firefox is not running and you run the Thunderbird program, MB will not protect it.

You can add the Thunderbird program to MB protection, as a custom rule, just select the program type as "Browser". That's what I do with Outlook, not part of the default "Protected Applications"...

Share this post


Link to post
Share on other sites

Yes, child processes of an application shielded by our exploit protection should automatically be protected as well (this is why we don't have to add a rule in our protection list for every browser plugin out there because they are already protected because the browser is, as long as the browser you're using is one of those we protect of course).

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.