I don't know whether to consider this a bonus action or an addendum.
So we'll say a bonus addendum, maybe.
I wanted to point a couple things out for you real quick.
First things first, let's hop on over to my side screen real quick.
You can see I have Ubuntu pulled up.
I just wanted to point out that Ubuntu, out of the box, does not have a native endpoint protection system.
Instead of having an active endpoint protection system installed on the operating system like Windows does with Defender,
or you could always install a third-party one, that's no problem at all.
But Ubuntu and other POSIX-based systems work on the idea of whitelisting application files and types of traffic
into basically the AppArmor and making sure that if it matches what's allowed, it's allowed.
Is it the safest thing out there? Absolutely not.
Now, going back to our Windows argument here for a second,
I want to point a couple things out to you.
First things first, here is the folder from my personal computer.
One or two things blurred out, obviously.
But what we're taking a look at are the actual Microsoft Windows Defender files.
Now, MPAVBase.vdm is the Delta file for recent updates.
And this can be examined with Kali tools like Defender to Yara.
And we're not doing that in this skill, but it's something that we may be taking a look at in the future later on in this course.
The reason I bring this up to you is that there's a way to further understand your enemy
by going through and taking a look at the rules that are listed inside of the rule set
for antivirus or endpoint protection programs like Windows Defender, as an example.
So we go through here and take a look at what's recent, what's signature-based, what's heuristic-based,
and know how to be able to craft your packets and files
to be able to go through and do PIN testing within an organization.
And it will also help you understand how to paste your network scans
so that way they don't pop up under the heuristic network-based detection methods.