Good list, but the whole thread is even more interesting;
Low Level Malware Protection
— Florian Roth (@cyb3rops) February 14, 2020
1. Use web proxies š
(proxy awareness in all malware stages is rare)
2. Block executable downloads š¦
(from unclassified domains; stage 2+ is often executable content)
3. Restrict workstation to workstation communication š§
(contains an outbreak)