Reply to thread

Message

<blockquote data-quote="simmerskool" data-source="post: 1040336" data-attributes="member: 61091">ok, I agree at least for now. <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite110" alt=";)" title="Wink&nbsp; &nbsp; ;)" loading="lazy" data-shortname=";)" /> And really happy I dug a little deeper on this one, it led me to the screen with ALL the info about that 3:55 AM powershell event. Much easier for me to get to the next level (whatever that is) by seeing and experiencing these things, rather than just reading about them. Or the longer I have Di on my win10 the more I&#039;m liking it. <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite116" alt=":D" title="Big grin&nbsp; &nbsp; :D" loading="lazy" data-shortname=":D" />PS Di just blocked an app I know is good -- Di Behavioral Analysis did not like Reflective DLL Injection Behavior. I see this as a positive thing. <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite116" alt=":D" title="Big grin&nbsp; &nbsp; :D" loading="lazy" data-shortname=":D" /> I can double check this, let the author know that maybe there&#039;s a better way for him to code this, and I can also allow it run next time I use that app. This is what I&#039;ve been wanting.</blockquote>

[QUOTE="simmerskool, post: 1040336, member: 61091"] ok, I agree at least for now. ;) And really happy I dug a little deeper on this one, it led me to the screen with ALL the info about that 3:55 AM powershell event. Much easier for me to get to the next level (whatever that is) by seeing and experiencing these things, rather than just reading about them. Or the longer I have Di on my win10 the more I'm liking it. :D PS Di just blocked an app I know is good -- Di Behavioral Analysis did not like Reflective DLL Injection Behavior. I see this as a positive thing. :D I can double check this, let the author know that maybe there's a better way for him to code this, and I can also allow it run next time I use that app. This is what I've been wanting. [/QUOTE]

Verification