Reply to thread

Message

<blockquote data-quote="Nagisa" data-source="post: 932794" data-attributes="member: 73722">If you exclude the low prevalence file default-deny popup (not something that should be done), some of the files are catched and terminated because of attempt to do an unauthorized change. The remaining runs on the system and AEGIS with it&#039;s behavioral detection kicks in sometimes but it&#039;s either not as aggressive or the samples downloaded from abuse.ch are not that serious ones. To be honest I would expect post-execution Predictive Machine Learning detections to be happen more often, because what it does is catching unknown malware. Maybe, the samples are not doing anything malicious right now in the system.[ATTACH=full]254794[/ATTACH][ATTACH]254792[/ATTACH][ATTACH]254793[/ATTACH]This of course is the worst case scenario. However I have positive thoughts about its continuous update of threat signatures. When I scan the remainings in the folder, more and more files gets detected throughout the same day.</blockquote>

[QUOTE="Nagisa, post: 932794, member: 73722"] If you exclude the low prevalence file default-deny popup (not something that should be done), some of the files are catched and terminated because of attempt to do an unauthorized change. The remaining runs on the system and AEGIS with it's behavioral detection kicks in sometimes but it's either not as aggressive or the samples downloaded from abuse.ch are not that serious ones. To be honest I would expect post-execution Predictive Machine Learning detections to be happen more often, because what it does is catching unknown malware. Maybe, the samples are not doing anything malicious right now in the system. [ATTACH type="full" alt="1614633248439.png"]254794[/ATTACH] [ATTACH]254792[/ATTACH] [ATTACH]254793[/ATTACH] This of course is the worst case scenario. However I have positive thoughts about its continuous update of threat signatures. When I scan the remainings in the folder, more and more files gets detected throughout the same day. [/QUOTE]

Verification