AirlockDigital – https://www.airlockdigital.com/
9$ AUD / Machine / Month ex GST paid Yearly ( 1 Year Commit )
- Cloud or Onprem hosted
- OTP – One Time Password to exclude the machine from controls to whitelist temporarily
- 4-6 weeks learning mode
- Scans .exe with Virus Total
- Available MacOS\Linux and Windows
- Can use Parent Process to allow .exe through like VSCode.exe to run and debug .exe’s being created
- Create Block Rule over the top of existing rules
- Predefined Microsoft Block Rules
- BLock rules for Vulnerability
- PSEXEC Being run
- Auth is Only AD \ Hybrid ( SID )
Threat Locker – https://www.threatlocker.com/
3.2$ / Machine / Month Ex GST
- Full Cloud Base
- Free Trial 4-6 weeks
- Built in Application list they manage for you
- Currently 3400 Predefined Apps for Mac and Windows
- Ability with the right license Restrict access to the Internet
- Ringfencing Apps like stop Office from being able to Powershell
- Users can Request Access
- Elevation can be allowed on Install ( Extra License ) or Upgrade
- Open and test .exe into a sandbox
- Firewall – Able to authenticate devices to devices so only allow devices through firewall that are authenticated no need for VPN
- Nice E8 Ticklist https://threatlocker.kb.help/threatlocker-as-an-essential-eight-maturity-model-mitigation-strategy/
Manage Engine App Control – https://www.manageengine.com/application-control/edition-comparison-matrix.html
- Free for 25 Users
- Self Hosted