Reply to thread

Message

<blockquote data-quote="NoVirusThanks" data-source="post: 701942" data-attributes="member: 68429">Just a quick update, new v1.4 (pre-release) (test11):<a href="http://downloads.novirusthanks.org/files/osarmor_setup_1.4_test11.exe" target="_blank">http://downloads.novirusthanks.org/files/osarmor_setup_1.4_test11.exe</a>*** Please do not share the download link, we will delete it when we&#039;ll release the official v1.4 ***So far this is what&#039;s new compared to the previous pre-release:+ Added buttons to save\load protection options to\from a file+ Some improvements on internal rules+ Fixed all reported false positives[USER=46633]@Darrin[/USER]Thanks for reporting it, should be fixed in this test 11.I&#039;ve also fine-tuned some internal rules related to that FP.[USER=64677]@l0rdraiden[/USER]We have not plan for that about OSArmor, but you may use the &quot;Custom Block-Rules&quot; to create customized or specific block-rules.It works the same way as SOB but supports only 3 variables.However, if you have some ideas about new rules, just let me know via PM or posting there and we&#039;ll discuss if add them to OSArmor &quot;Configurator&quot;.Yes, it shows a popup dialog when something is blocked.A link to VT would not help much, since many exploits run system processes like cmd.exe, etc, the VT link would show the file as clean.[USER=50782]@Windows_Security[/USER]You mean like adding &quot;Block unsigned processes on Desktop folder&quot; on Configurator right?We can add it and make it unchecked by default (can create some FPs to regular users).[USER=32260]@Andy Ful[/USER]Yes, OSArmor supports only 3 variables for now, but I can add support for %SIGNER% and %PARENTSIGNER% in case.Then you have all that you need to create very fine-tuned custom process-block rules.</blockquote>

[QUOTE="NoVirusThanks, post: 701942, member: 68429"] Just a quick update, new v1.4 (pre-release) (test11): [URL]http://downloads.novirusthanks.org/files/osarmor_setup_1.4_test11.exe[/URL] *** Please do not share the download link, we will delete it when we'll release the official v1.4 *** So far this is what's new compared to the previous pre-release: + Added buttons to save\load protection options to\from a file + Some improvements on internal rules + Fixed all reported false positives [USER=46633]@Darrin[/USER] Thanks for reporting it, should be fixed in this test 11. I've also fine-tuned some internal rules related to that FP. [USER=64677]@l0rdraiden[/USER] We have not plan for that about OSArmor, but you may use the "Custom Block-Rules" to create customized or specific block-rules. It works the same way as SOB but supports only 3 variables. However, if you have some ideas about new rules, just let me know via PM or posting there and we'll discuss if add them to OSArmor "Configurator". Yes, it shows a popup dialog when something is blocked. A link to VT would not help much, since many exploits run system processes like cmd.exe, etc, the VT link would show the file as clean. [USER=50782]@Windows_Security[/USER] You mean like adding "Block unsigned processes on Desktop folder" on Configurator right? We can add it and make it unchecked by default (can create some FPs to regular users). [USER=32260]@Andy Ful[/USER] Yes, OSArmor supports only 3 variables for now, but I can add support for %SIGNER% and %PARENTSIGNER% in case. Then you have all that you need to create very fine-tuned custom process-block rules. [/QUOTE]

Verification