Advice Request Adaptive Defence 360

[Emmanuellws]

[QUOTE = "Emmanuellws, poste: 612814, membre: 60108"] Eh bien, l'application est Whitelisting la voie à suivre pour lutter contre ransomware zéro jour. Avec une date limite sur la résolution du ransomware et les logiciels malveillants zeroday m'a été donnée par la direction, je suis trop consumé sur le nombre limité de produits je l'ai mentionné plus tôt jusqu'à ce que je fini avec la Défense Panda Panda Adaptive 360. Enfin Ad360 est en place ... et maintenant je peux dormir à poings fermés sans cauchemar. Merci d'avoir partagé info brève sur AppGuard. [/ QUOTE]

hello,so to resume l keep my av emsisoft security and l add an anti executable like voodooshield and l get a barrier almost impassable

Hello, Yes...I read some forums recommended that Voodooshield combined with any light and Traditional AV is a very strong combination. Of course, you can try it for free for Home personal use only. I tried it before with Avast and Voodooshield combination....its very good actually. I'm sure it will do good to for your AV too...Voodooshield will add extra protection to your machine. With built-in Virustotal oppinion and a free Cuckoo Sandbox. Try it..you will be very impressed.

 

[Emmanuellws]

Some Sample already Classified under Malware by Panda Labs.

Spoiler: sample1

Spoiler: sample2

Currentlu only 12 popular AV detected this malware.

Spoiler: sample3

Other screenshot...

Spoiler: sample4

 

[Emmanuellws]

a really fresh malware....doc with powershell script executed...

Spoiler: sample1

On virustotal....at this point of time I post...

Spoiler: sample2

another attack failed and being blocked by Panda Adaptive Defense 360. This is really a zero-day malware...phewww....

 

[XhenEd]

That is totally expected because of its whitelisting part.
I think any good whitelisting app will be able to block that (e.g. Kaspersky with TAM enabled, and Comodo Firewall).

 

[Evjl's Rain]

That is totally expected because of its whitelisting part.
I think any good whitelisting app will be able to block that (e.g. Kaspersky with TAM enabled, and Comodo Firewall).

I have the same idea.
So this panda adaptive 360 is quite similar to Kaspersky with TAM or comodo only allowing whitelisted apps to run

the good thing is comodo is free. I think panda 360 is not cheap

 

[XhenEd]

I have the same idea.
So this panda adaptive 360 is quite similar to Kaspersky with TAM or comodo only allowing whitelisted apps to run

the good thing is comodo is free. I think panda 360 is not cheap

Panda Adaptive Defense is an enterprise product, so I already expected it to have good blocking ability against unknown apps, considering it must protect businesses.
I think it's a standard for an enterprise product to have "whitelisting" ability.

 

[Emmanuellws]

Malware samples and forensic data.

Spoiler: sample1

Spoiler: sample2

 

[Amelith Nargothrond]

Panda Adaptive Defense is an enterprise product, so I already expected it to have good blocking ability against unknown apps, considering it must protect businesses.
I think it's a standard for an enterprise product to have "whitelisting" ability.

This can really cripple productivity, it simply cannot be and it isn't implemented in many cases (like many medical institutes).

 

[Amelith Nargothrond]

View attachment 144364

View attachment 144365

Please add spoiler tags to the images.

 

[Emmanuellws]

I have the same idea.
So this panda adaptive 360 is quite similar to Kaspersky with TAM or comodo only allowing whitelisted apps to run

the good thing is comodo is free. I think panda 360 is not cheap

Not sure how do you consider cheap...when in Malaysia it cost us RM70 per license - 1 year subscription.

 

[Amelith Nargothrond]

Not sure how do you consider cheap...when in Malaysia it cost us RM70 per license - 1 year subscription.

70 Malaysian Ringgit equals
14.58 Euro

70 Malaysian Ringgit equals
15.87 US Dollar

 

[Emmanuellws]

This can really cripple productivity, it simply cannot be and it isn't implemented in many cases (like many medical institutes).

It wont cripple productivity...bcoz Panda already classisfied all known software as badware, goodware, PUP, malware and unknown...unlike Voodooshield..you haveto start your own list. ...in their Big Data...they already classified millions of apps and files...you can check their security models in their website. Don't get me wrong...I like Voodooshield...especially their Sandbox feature..you can see the malware executed Live.

 

[Amelith Nargothrond]

It wont cripple productivity...bcoz Panda already classisfied all known software as badware, goodware, PUP, malware and unknown...unlike Voodooshield..you haveto start your own list. ...in their Big Data...they already classified millions of apps and files...you can check their security models in their website.

OK

 

[Evjl's Rain]

Not sure how do you consider cheap...when in Malaysia it cost us RM70 per license - 1 year subscription.

ok so the price is reasonable the level of protection it can provide. I thought it would be more expensive than panda premium

 

[Emmanuellws]

Classification Status of my organization's installed software and files...sample

They uses machine learning techniques and hashes and checks by Panda Labs staff to classify all this files into their Big Data so they can have a new and updated classification of programs and files.

 

[Emmanuellws]

Please add spoiler tags to the images.

sorry...ok I will try to edit my post.

 

[XhenEd]

This can really cripple productivity, it simply cannot be and it isn't implemented in many cases (like many medical institutes).

It won't. Well, it won't cripple productivity as long as the admin or the IT department is competent enough to have whitelisted all what needs to be allowed.

 

[Emmanuellws]

It won't. Well, it won't cripple productivity as long as the admin or the IT department is competent enough to have whitelisted all what needs to be allowed.

Of course, custom tailored software for the organization....IT admin will do the job. hahaha..but if we are unsure....we let Panda's Big Data and the Labs to do the classification for us.

 

[Amelith Nargothrond]

It won't. Well, it won't cripple productivity as long as the admin or the IT department is competent enough to have whitelisted all what needs to be allowed.

It will and it does. It's a dynamic environment. Sick people are getting analysis results on flash memory and cds, all with different apps. There's not an IT department in the world that will FIRST invite the patient to their PC and whitelist the app, propagate the changes and send the patient back to the doctor. I work at one of those institutes, i know.

 

[Emmanuellws]

It will and it does. It's a dynamic environment. Sick people are getting analysis results on flash memory and cds, all with different apps. There's not an IT department in the world that will FIRST invite the patient to their PC and whitelist the app, propagate the changes and send the patient back to the doctor. I work at one of those institutes, i know.

These are the challenges with exisiting app whitelisting based products..
Thats why PAD360 allows IT admin to define different policy for different departments or individual..then it also allows IT admin to allow any apps that's block through Cloud. You can set exclusion as well...all done through cloud. You dont have to do anything at the user level. Just let it sync and do the changes.

Example of a policy

Spoiler: policy samples

Firewall Policy settings from the cloud

Spoiler: firewallpolicy

Device Control settings from the cloud

Spoiler: devicecontrol

Web Access Control

Spoiler: webaccesscontrol

You can split the settings by dept

Spoiler: settingsfolder

You can move a computer from another policy folder to another policy folder.

I found a very detailed technical specs of how Panda Adaptive Defense 360 works.... here

Spoiler: technicalworks1

Adaptive Defense Model

Spoiler: adaptivedefensemodel

Spoiler: defensemodel2

EVent Analysis

Spoiler: eventanalysis

ok...I think this is too much...but you can read it for yourself here
http://pandasecurity.ir/files/documents/ADAPTIVEDEFENSE-manual-EN 1.2.pdf
Not sure if it is outdated or there is a new updated available.