Reply to thread

Message

<blockquote data-quote="struppigel" data-source="post: 1035262" data-attributes="member: 86910">From what I read on their website, DeepInstinct is solely based on static analysis.You are right that in this case the expectation would be that VT results are the same.Here are a number of reason I can think of, why the result still differs, but all of these are speculation!<ul>
<li data-xf-list-type="ul">Updates of the AI model can arrive later on VT than on endpoints, so yours might just be more up-to-date</li>
<li data-xf-list-type="ul">DeepInstinct might also include contextual data, e.g., where the file was downloaded from, or if it was downloaded at all, where it is currently on the filesystem, etc. That data will not be there or will be different on VT</li>
<li data-xf-list-type="ul">The settings might be different on VT. You said the confidence indicates that all settings should have detected this threat, but who knows what else those settings entail. It can be more complex than just confidence level adjustment</li>
</ul>If you are really curious, ask DeepInstinct support.</blockquote>

[QUOTE="struppigel, post: 1035262, member: 86910"] From what I read on their website, DeepInstinct is solely based on static analysis.You are right that in this case the expectation would be that VT results are the same. Here are a number of reason I can think of, why the result still differs, but [B][COLOR=rgb(243, 121, 52)]all of these are speculation[/COLOR][/B][COLOR=rgb(243, 121, 52)][B]![/B][/COLOR] [LIST] [*]Updates of the AI model can arrive later on VT than on endpoints, so yours might just be more up-to-date [*]DeepInstinct might also include contextual data, e.g., where the file was downloaded from, or if it was downloaded at all, where it is currently on the filesystem, etc. That data will not be there or will be different on VT [*]The settings might be different on VT. You said the confidence indicates that all settings should have detected this threat, but who knows what else those settings entail. It can be more complex than just confidence level adjustment [/LIST] If you are really curious, ask DeepInstinct support. [/QUOTE]

Verification