Application Whitelisting Theory and Setup
Application whitelisting is a very effective protection
mechanism, but it can be difficult to manage and deploy
at scale, and is not commonly deployed by larger organizations.
A typical Windows-based application whitelisting
solution is installed as either a filter driver
or through the HyperVisor.
In this section, we’ll discuss the theory
behind these implementations.