You're naive to think clicking on deny is a valid way to test malware dynamically.
also there is a term for results where there is no alert but you don't see any malicious activity, it would result in a "protected" end result and not a "not clean" one.
This. Hardly a user will click "deny" when the antivirus tries to block their game crack. They'll allow everything to make it work. Testing means creating a virtual enviroment that represents a user's. If we go follow every advice security software gives us then that's not real dynamic testing but a protection test.
Thanks for the video. Keep it up. But please don't make it too long