Cylance Updated Online Interface

[Burrito]

Cylance nicely updated the online GUI.

They also now provide more policy updates.

And it's the lightest AV I've ever used.

And it's super strong against 0-days and ransomware.

But all those false positives.... ☹

Advanced Endpoint Protection Test

Bitdefender commissioned AV-Comparatives to perform the advanced Endpoint Protection Test 2018. Read about the results here.

www.av-comparatives.org

**Full disclosure. Although I have Cylance on multiple machines... I have it turned off mostly. I just prefer other products at this time...

 

[[correlate]]

Good news. The view is different from the previous one
Green = Cylance + Burrito .

 

[[correlate]]

View attachment 235271

View attachment 235272

Cylance nicely updated the online GUI.

They also now provide more policy updates.

And it's the lightest AV I've ever used.

And it's super strong against 0-days and ransomware.

But all those false positives.... ☹

View attachment 235275

Advanced Endpoint Protection Test

Bitdefender commissioned AV-Comparatives to perform the advanced Endpoint Protection Test 2018. Read about the results here.

www.av-comparatives.org

View attachment 235280

**Full disclosure. Although I have Cylance on multiple machines... I have it turned off mostly. I just prefer other products at this time...

He scored better than his competitors
Carbon Black, CrowdStrike, SeninelOne

 

[harlan4096]

That is a 2 years old test

 

[Rollers127]

I've noticed over the previous few months on most sites that there is a lot of knocking of Cylance, I for one like their innovative approach and lightness and renewed again this year for the home version. I do always do second opinion scans with defender and check daily with process explorer but have never had any issues at all. Its simplicity might not work for some, and each to their own, but for me, I like it

 

[Arequire]

I do always do second opinion scans with defender and check daily with process explorer

I wouldn't waste your time doing this unless you suspect your system might be infected.

 

[SeriousHoax]

Is it cloud dependent or most things happen locally?

 

[Burrito]

I've noticed over the previous few months on most sites that there is a lot of knocking of Cylance, I for one like their innovative approach and lightness and renewed again this year for the home version. I do always do second opinion scans with defender and check daily with process explorer but have never had any issues at all. Its simplicity might not work for some, and each to their own, but for me, I like it

I think it is really good.... for what it is. There are a few holes... like exploits and preventative web protection. But Cylance is surprisingly effective for having such a tiny footprint and virtually no system impact.

I wouldn't waste your time doing this unless you suspect your system might be infected.

Since Cylance has no scanning function and is highly specialized but possibly has a few areas of 'lesser coverage' -- I would think that periodic scanning might be prudent.

Is it cloud dependent or most things happen locally?

Hmmmm.... I'm not sure. My assumption is that the ML/AI piece is done locally.

When I first become interested in Cylance, my interest was partially based on this test of the Cylance 'Predictive Advantage.' This SE Labs test seems to indicate that the ML/AI piece is done at the endpoint.

https://selabs.uk/download/enterprise/march-2018-pmr.pdf

But Cylance does ask permission to move tagged files to the cloud.

And... there was other information 'out there' that seemed to indicate that maybe a cloud could be more involved. If I remember correctly, this was Umbra's belief. But I dunno.

 

[Arequire]

Since Cylance has no scanning function and is highly specialized but possibly has a few areas of 'lesser coverage' -- I would think that periodic scanning might be prudent.

It does have on-demand scanning functionality but you have to enable the Advanced UI to access it.
With that said, allowing Defender to perform its own periodic scanning while the system is idle is fine, but I'd argue going out of the way to initiate the scan manually is unnecessary, especially if they aren't constantly engaging in risky computing habits.

The daily Process Explorer inspection is also unnecessary and excessive for the same reason.

 

[oldschool]

allowing Defender to perform its own periodic scanning while the system is

is kind of a waste because WD's strength is cloud protection and not static sigs/scanning. An occasional scan with somthing else like HP or EEK would be preferable to WD.

 

[Arequire]

is kind of a waste because WD'a strength is cloud protection and not static sigs/scanning.

Oh right. Forgot that WD doesn't fully utilise its cloud with on-demand scans.

 

[Rollers127]

Oh right. Forgot that WD doesn't fully utilise its cloud with on-demand scans.

I wasn't aware of that either. I think I only use WD because its already on the computer, so no extra bloat. Might reconsider that

 

[Burrito]

The pros, cons and limitations of AI and machine learning in antivirus software - Security Boulevard

Some antivirus vendors are marketing AI and machine learning as the silver bullet to malware, but is there any truth to these claims? The post The pros, cons and limitations of AI and machine learning in antivirus software appeared first on Emsisoft | Security Blog.

securityboulevard.com

A quick read on AI/ML.

 

[Mrfirewalls]

I have deployed Cylance (corporate edition) as a MSSP to a multitude of customers. Yes the full version does take a bit of tuning, but is very effective. The UI you have mentioned is for the home edition, which is a cut down version. I do find it frustrating as I know that the product can do a lot more than my home edition. Really need to look at the 2 products separately in any testing.

 

[Burrito]

I have deployed Cylance (corporate edition) as a MSSP to a multitude of customers. Yes the full version does take a bit of tuning, but is very effective. The UI you have mentioned is for the home edition, which is a cut down version. I do find it frustrating as I know that the product can do a lot more than my home edition. Really need to look at the 2 products separately in any testing.

Sounds like you may be an expert.

Yes, the home version is pretty limited.

But please give us any tip or tweaks that you know about.

 

[Divine_Barakah]

I still have remaining days (purchased 1 year subscription on STacksocial). I would use it combined with MB Browser Guard.

 

[Kongo]

Just received a new update for Cylance. Does anybody know where to find the official patchnotes? Would really like to see what changed.

 

[Kongo]

New client design refresh of Cylance Smart Antivirus:



Will see if I can find out something about the patchnotes.

 

[[correlate]]

New client design refresh of Cylance Smart Antivirus:

View attachment 256712

Will see if I can find out something about the patchnotes.

Nice updates onThe Dashboard
But there is no update on the program interface, nor additions.

 

[Kongo]

Nice updates on the admin page
But there is no update on the program interface, nor additions.
View attachment 256713

It's not the admin page, it's the program interface actually. The Dashboard is the same as before.