Reply to thread

Message

<blockquote data-quote="Trident" data-source="post: 1036836" data-attributes="member: 99014">Dude I am not gonna waste my time talking to you. I have explained to you few times now that all programs for Windows work by calling native Windows APIs. That’s why it’s not possible to use Android/ iOS/Mac OS software on Windows, because the relevant APIs are absent from the OS and calling them will produce nothing but an error, unless an emulator (such as the Android subsystem for Windows) is used. This emulator will provide the necessary environment and APIs.Reducing the number of API calls from apps to Windows (and hardware) monitored is one way to make behavioural blocking lighter, not the only one. Other optimisations are filtering safe, signed processes and many others.The emulator engine in an antivirus works by emulating instructions-of-interest that seem unknown and suspicious to static analysis engines. This allows to detect more threats such as packers for which static analysis is notoriously ineffective as it it can’t extract attributes. Another way to optimise the antivirus for lightness is to reduce the number of instructions emulated.Please educate yourself and don’t waste my time.The discussion is not off-topic, it is in relation to K7 lightness.Also, CheckPoint is leader on cloud detonation, together with CrowdStrike.</blockquote>

[QUOTE="Trident, post: 1036836, member: 99014"] Dude I am not gonna waste my time talking to you. I have explained to you few times now that all programs for Windows work by calling native Windows APIs. That’s why it’s not possible to use Android/ iOS/Mac OS software on Windows, because the relevant APIs are absent from the OS and calling them will produce nothing but an error, unless an emulator (such as the Android subsystem for Windows) is used. This emulator will provide the necessary environment and APIs. Reducing the number of API calls from apps to Windows (and hardware) monitored is one way to make behavioural blocking lighter, not the only one. Other optimisations are filtering safe, signed processes and many others. The emulator engine in an antivirus works by emulating instructions-of-interest that seem unknown and suspicious to static analysis engines. This allows to detect more threats such as packers for which static analysis is notoriously ineffective as it it can’t extract attributes. Another way to optimise the antivirus for lightness is to reduce the number of instructions emulated. Please educate yourself and don’t waste my time. The discussion is not off-topic, it is in relation to K7 lightness. Also, CheckPoint is leader on cloud detonation, together with CrowdStrike. [/QUOTE]

Verification