App Review Heimdal Thor Premium vs Ransomware (Juan Diaz)

[Der.Reisende]

Content source

https://youtu.be/64vJOvX-oTc

 

[RoboMan]

At the end of the day, the products that show the highest protection rate against several ransomware samples are those who guarantee the default deny of their execution

 

[spaceoctopus]

Finally some test about Heimdal! It did quite a good job, until the last Ransomware. For such a new product it's not bad at all. The product is pretty well matured now.

The only deal breaker for me about this product, is that Thor Foresight doesn't work well with Vpns. It would have been a wonderful addition in a light security setup with Vpn.

 

[RoboMan]

Finally some test about Heimdal! It did quite a good job, until the last Ransomware. For such a new product it's not bad at all. The product is pretty well matured now.

The only deal breaker for me about this product, is that Thor Foresight doesn't work well with Vpns. It would have been a wonderful addition in a light security setup with Vpn.

I agree.

Nevertheless, can we truly assume a product did a "good job" if it only failed one out of X samples? After all, that still means an infection when you go to sleep. Same applies to "this product has a 95% detection rate". If that 5% is gonna encrypt your files, what good makes it catches the rest?

 

[bribon77]

At the end of the day, the products that show the highest protection rate against several ransomware samples are those who guarantee the default deny of their execution

For those, zero days it is best to deny by default, I agree.

 

[spaceoctopus]

I agree.

Nevertheless, can we truly assume a product did a "good job" if it only failed one out of X samples? After all, that still means an infection when you go to sleep. Same applies to "this product has a 95% detection rate". If that 5% is gonna encrypt your files, what good makes it catches the rest?

It depends from which perspective you look at it. In some real world situation, it is definitely a big fail. But on a comparison point with other products, you can say that it did quite well.

 

[upnorth]

Thanks for the share @Der.Reisende . Wish Thor could have been opened also at the end, so we all could have seen what module/feature worked or not.

 

[Windows_Security]

Insufficient right to execute, seems like a build-in Windows Defence. Although Smart to use it (by Heimdal), wondering what would happen when you remove the mark of the web block.