Reply to thread

Message

<blockquote data-quote="ExecutiveOrder" data-source="post: 964793" data-attributes="member: 93099">Not sure if Bitdefender changed its product behavior regarding script detection in the past 2 years.It&#039;s a bit late to reply, but...In <a href="https://www.av-comparatives.org/tests/enhanced-real-world-test-2020-consumer/" target="_blank">ATP 2020</a> test, with the same &quot;default&quot; settings, it successfully blocked a similar &quot;script&quot; threat to number (3):In <a href="https://www.av-comparatives.org/tests/enhanced-real-world-test-2019-consumer/" target="_blank">ATP 2019 test</a>, it successfully blocked a &quot;script&quot; threat scenario:But also failed to another &quot;script&quot; threat scenario:Based on <a href="https://download.bitdefender.com/resources/media/materials/2020/userguides/en_EN/bitdefender_ts_2020_userguide_en.pdf" target="_blank">this user guide</a>:Not sure if it means only applicable to scripts (including PowerShell) inside macro files (like in office documents), it didn&#039;t mention if this setting is turned on by default. None of the &quot;script&quot; test scenarios were using macros as an attack vector. Also, this user guide is similar to the <a href="https://www.bitdefender.com/consumer/support/answer/13450/" target="_blank">website support information</a>, published in late 2019, before ATP 2020 and 2021 tests were started.In this <a href="https://community.bitdefender.com/en/discussion/comment/294473" target="_blank">Bitdefender community post</a>, look like it is just an UI issue, the original post said that after installation it&#039;s OFF but turned ON after reset (contrary to your experience, 2 years apart though, different versions), another user replied that the feature didn&#039;t appear in UI and have to contact support based on moderator&#039;s suggestion.Do it only in guest VM if you want to test it against any malicious script.Anyway, at the end of the day, we can conclude it&#039;s turned ON based on a statement by AV-Comparatives themselves:Honestly, I also expect better from Bitdefender and am rather disappointed by these results, but anything can be turned out unexpected.</blockquote>

[QUOTE="ExecutiveOrder, post: 964793, member: 93099"] Not sure if Bitdefender changed its product behavior regarding script detection in the past 2 years. It's a bit late to reply, but... In [URL='https://www.av-comparatives.org/tests/enhanced-real-world-test-2020-consumer/']ATP 2020[/URL] test, with the same "default" settings, it successfully blocked a similar "script" threat to number (3): In [URL='https://www.av-comparatives.org/tests/enhanced-real-world-test-2019-consumer/']ATP 2019 test[/URL], it successfully blocked a "script" threat scenario: But also failed to another "script" threat scenario: Based on [URL='https://download.bitdefender.com/resources/media/materials/2020/userguides/en_EN/bitdefender_ts_2020_userguide_en.pdf']this user guide[/URL]: Not sure if it means only applicable to scripts (including PowerShell) inside macro files (like in office documents), it didn't mention if this setting is turned on by default. None of the "script" test scenarios were using macros as an attack vector. Also, this user guide is similar to the [URL='https://www.bitdefender.com/consumer/support/answer/13450/']website support information[/URL], published in late 2019, before ATP 2020 and 2021 tests were started. In this [URL='https://community.bitdefender.com/en/discussion/comment/294473']Bitdefender community post[/URL], look like it is just an UI issue, the original post said that after installation it's OFF but turned ON after reset (contrary to your experience, 2 years apart though, different versions), another user replied that the feature didn't appear in UI and have to contact support based on moderator's suggestion. Do it only in guest VM if you want to test it against any malicious script. Anyway, at the end of the day, we can conclude it's turned ON based on a statement by AV-Comparatives themselves: Honestly, I also expect better from Bitdefender and am rather disappointed by these results, but anything can be turned out unexpected. [/QUOTE]

Verification