Reply to thread

Message

<blockquote data-quote="Mahesh Sudula" data-source="post: 1098814" data-attributes="member: 65679">Trend works this way. It does have good behavior monitoring modules. They somehow able to intelligently manage default-deny alongside behavior monitoring.Any rare files (unknown, have less prevalence in TM cloud), will be blocked by default as same as how malicious files are blocked by TM.This is the problem. We do not really understand how and why TM is blocking them. Most of the blocks are instant indicating default-deny. Logs doesn&#039;t indicate much information either.Trend shines in the execution phase, even best (in fact total block out) once it switches to hypersensitive mode automatically. This mode is engaged automatically by TM if there are multiple suspicious file blocks back to back. AV testing scenarios fit well in this scenario and explain &quot;its illegal&quot; but intelligent way for such clean sheet</blockquote>

[QUOTE="Mahesh Sudula, post: 1098814, member: 65679"] Trend works this way. It does have good behavior monitoring modules. They somehow able to intelligently manage default-deny alongside behavior monitoring. Any rare files (unknown, have less prevalence in TM cloud), will be blocked by default as same as how malicious files are blocked by TM. This is the problem. We do not really understand how and why TM is blocking them. Most of the blocks are instant indicating default-deny. Logs doesn't indicate much information either. Trend shines in the execution phase, even best (in fact total block out) once it switches to hypersensitive mode automatically. This mode is engaged automatically by TM if there are multiple suspicious file blocks back to back. AV testing scenarios fit well in this scenario and explain "its illegal" but intelligent way for such [B]clean sheet[/B] [/QUOTE]

Verification