[wkat4242]

Don't forget the enterprise market has a whole different threat model. Even though blanket exclusions are often used, a determined attacker will quickly figure out to dump their remote exploration tool in c:\dev .

[josephcsible]

If the attacker gets far enough to be able to put something in c:\dev and run it, your protections have already failed.