Reply to thread

Message

<blockquote data-quote="Trident" data-source="post: 1100370" data-attributes="member: 99014">[USER=61091]@simmerskool[/USER] there are better ways to do the job than containing unknown executables, for example, Avast and Webroot can deny execution. The whole initiative is great, but the execution requires more telemetry and resources than Comodo’s got on their hands. Yes, through settings, one can configure “automatically contain applications less than X days old” or one can disable execution completely.The Sophos engine is one of the leading engines out there. There is nothing subpar about it, the engine, like Kaspersky, is predominantly based on heuristics (known for many years as Behavioural Genotype). Additional protection, just like Kaspersky with their UDS is delivered through Sophos Live Protection.That subpar AV also includes emulation that can block scripts, pdf documents, including ones that contain phishing, dll sideloading, unknown executables and many others nasties that frequently cause hiccups. And that’s before you open them.Emulation is improved on monthly basis.It also includes business-grade behavioural blocking that works for all apps (Comodo by default analyses only the contained ones).Comodo’s Valkyrie is a poor attempt to recreate Check Point’s emulation, unfortunately, just as unsuccessful as everything else that they do.How heavy it is, the CPU usage rarely exceeds 5-6% for all processes combines, on 11th Gen Intel Core i5 (from the more mediocre models).But we all know that the market is not just Comodo and ZoneAlarm, right?</blockquote>

[QUOTE="Trident, post: 1100370, member: 99014"] [USER=61091]@simmerskool[/USER] there are better ways to do the job than containing unknown executables, for example, Avast and Webroot can deny execution. The whole initiative is great, but the execution requires more telemetry and resources than Comodo’s got on their hands. Yes, through settings, one can configure “automatically contain applications less than X days old” or one can disable execution completely. The Sophos engine is one of the leading engines out there. There is nothing subpar about it, the engine, like Kaspersky, is predominantly based on heuristics (known for many years as Behavioural Genotype). Additional protection, just like Kaspersky with their UDS is delivered through Sophos Live Protection. That subpar AV also includes emulation that can block scripts, pdf documents, including ones that contain phishing, dll sideloading, unknown executables [B]and many others nasties that frequently cause hiccups[/B]. And that’s before you open them. Emulation is improved on monthly basis. It also includes business-grade behavioural blocking that works for all apps (Comodo by default analyses only the contained ones). Comodo’s Valkyrie is a poor attempt to recreate Check Point’s emulation, unfortunately, just as unsuccessful as everything else that they do. How heavy it is, the CPU usage rarely exceeds 5-6% for all processes combines, on 11th Gen Intel Core i5 (from the more mediocre models). But we all know that the market is not just Comodo and ZoneAlarm, right? [/QUOTE]

Verification