App Review Christmas Special Test of ThreatFire 4.7 (6 years old behavior blocker!)

[Av Gurus]

Found it (click), tnx...there is a lot of rules...

 

[HarborFront]

Can somebody run this ThreatFire against the RanSim Ransomware Simulator and see how it fairs?

 

[Av Gurus]

Can somebody run this ThreatFire against the RanSim Ransomware Simulator and see how it fairs?

Not good...

 

[HarborFront]

Not good...

View attachment 129042

So it failed ALL the 10 tests. Too bad I thought ThreatFire performed very well in the video here

 

[RejZoR]

I don't think this "simulator" performs malicious "enough" like behavior to provoke ThreatFire. Besides, it's a 6 years old app, the fact it actually detected real ransomware was a bonus of a treat.

 

[HarborFront]

I don't think this "simulator" performs malicious "enough" like behavior to provoke ThreatFire. Besides, it's a 6 years old app, the fact it actually detected real ransomware was a bonus of a treat.

FYI, I tested with CFW and its HIPs detected all the 10 ransomware alerts.

You can view my test results here

KnowBe4’s Ransomware Simulator "RanSim"

 

[RejZoR]

Yeah, but HIPS is dumb. It just says "this happened" and then you have to decide. Behavior blockers do all the deciding for you. And what they alert is in 99% of cases a correct detection.

 

[Viking]

I used to have Threatfire installed on my old xp machine back in the day. I thought that it wad one of the best security software around back then. I miss it.