Discussion Thread Harmony Endpoint by Check Point

[Victor M]

Does Harmony detect and stop Metasploit's Meterpreter ? My attackers seem to be using Metasploit.

 

[Xeno1234]

I was testing checkpoint yesterday and I am wondering, why were some files not sent for threat emulation (the emulation outside of the extension) These files were under 50mb and were types that were supported by the engine.

 

[Xeno1234]

According to AV Comparatives, Harmony lacks a hook for the Kernal Space, and cannot monitor API calls within the Kernel. Is this true, and if so, what impact does this have on its detection capabilities?

 

[carl fish]

How does Harmony handle ransomware?

 

[Xeno1234]

How does Harmony handle ransomware?

Harmony utilizes many methods. You have threat emulation, threat reputation, Kaspersky /Sophos and CheckPoint Harmony local anti malware engines, and a anti-ransomware component which places honeypot files on the PC, and if they are modified, it remediates the infection.
The Honey Pot Component is the last line of defense, and is bypassed by anti-honeypot ransomware.

 

[carl fish]

Does anyone have any policies I can apply for maximum security?

 

[Xeno1234]

Does anyone have any policies I can apply for maximum security?

Start of the thread there are policies.