Comment deny unknown binaries to execute (Score 1) 218
Critical Systems should be closely monitored to find any unknown/un-authorized changes. Also going one step further, unknown binaries/scripts can be proactively denied execution and one of the company which offer this solution is Solidcore.