Reply to thread

Message

<blockquote data-quote="SeriousHoax" data-source="post: 920572" data-attributes="member: 78686">I don&#039;t think they changed much in terms of behavior blocking. They are still mainly statistical analysis dependent. I do see the machine learning component gets update quite frequently. Which means their ML/Augur isn&#039;t properly trained yet and requires updates regularly.The filless powershell Tesla [USER=89360]@McMcbrad[/USER] talked about here was also getting detect by ESET the day he posted when it had 0 detection on VT even though VT is not showing it.[URL unfurl=&quot;true&quot;]https://malwaretips.com/threads/fileless-tesla-abuses-net-framework-processes.105636/[/URL]But as you know, ESET&#039;s signature based detection has always been spot on but behavior blocking wise there don&#039;t seem to be any change.But they have performed excellent in every AV lab tests this year, so maybe they have done something internally. Maybe&nbsp; [USER=89360]@McMcbrad[/USER] can test.</blockquote>

[QUOTE="SeriousHoax, post: 920572, member: 78686"] I don't think they changed much in terms of behavior blocking. They are still mainly statistical analysis dependent. I do see the machine learning component gets update quite frequently. Which means their ML/Augur isn't properly trained yet and requires updates regularly. The filless powershell Tesla [USER=89360]@McMcbrad[/USER] talked about here was also getting detect by ESET the day he posted when it had 0 detection on VT even though VT is not showing it. [URL unfurl="true"]https://malwaretips.com/threads/fileless-tesla-abuses-net-framework-processes.105636/[/URL] But as you know, ESET's signature based detection has always been spot on but behavior blocking wise there don't seem to be any change. But they have performed excellent in every AV lab tests this year, so maybe they have done something internally. Maybe [USER=89360]@McMcbrad[/USER] can test. [/QUOTE]

Verification