We use VSE 8.8 with patch 7 controled by ePO. I have been keeping up with PD25203 up until rev h. I see rev j is now out so i decided to go back to rev i to see what if anything i need to adjust or remove. Seems cryptolocker now has vIV only in the rev i pdf. Does this mean i should remove vI and vIII which we still have in our ePO access policies?
i don't think to update all why because if you are using patch 7 and latest dat the ransomware and cryptolocker are also updated in latest dat for some safe we are using that
I know this post is a few months old but I have the same question. In my case I've kept the rules in place, i'd rather be safe than sorry.
I've got a spreadsheet with all the rules/settings listed for the various policies, this helps keep track and also highlights any overlap in the rules.