[josephcsible]

If the attacker gets far enough to be able to put something in c:\dev and run it, your protections have already failed.