The New Security Fundamentals – Kill Your AV

This piece argues that “AV is Dead” and urges organizations to prioritize application whitelisting (e.g., AppLocker/SRP), enable internal host firewalls to block lateral movement, adopt pragmatic Internet whitelisting to reduce exposure, and perform discrepancy analysis with tools like Security Onion/Bro, Kansa, and Microsoft ATA. It contends AV/IDS/IPS are largely “security theater” and advocates treating the internal network as hostile while focusing on reducing noise and enforcing known-good behaviors.