Advice Request Regarding on NVT EXE Radar PRO?

[jamescv7]

@Davidov: What do you mean? Voodoshield provide as much as possible an anti-exploit functionality that blocks any possible scripts to execute same goes to NVT too.

 

[CMLew]

@Davidov: What do you mean? Voodoshield provide as much as possible an anti-exploit functionality that blocks any possible scripts to execute same goes to NVT too.

I thought NVT by itself is a pure anti-executable?

 

[bunchuu]

I was in Learning Mode when installing SBIE. Let it run for few days and then change to Lockdown Mode.

learning mode is the best feature in NVT ERP

 

[Azure]

@Davidov: What do you mean? Voodoshield provide as much as possible an anti-exploit functionality that blocks any possible scripts to execute same goes to NVT too.

Apparently VoodooShield had integrated a basic anti-exploit function. I don't think EXE Radar Pro has that, at most what it does have is the "Vulnerable process" function which I think could help protect processes from being exploited. Though other users like @Umbra and @hjlbx could confirm or deny that.

 

[Azure]

learning mode is the best feature in NVT ERP

Install mode is good too. If you want, you don't have to disable the protection to install/uninstall any software.

 

[CMLew]

Apparently VoodooShield had integrated a basic anti-exploit function. I don't think EXE Radar Pro has that, at most what it does have is the "Vulnerable process" function which I think could help protect processes from being exploited. Though other users like @Umbra and @hjlbx could confirm or deny that.

That's what I thought too.
Possibly what could happen is that in NVT you can whitelist them and put it into vulnerable process. Then set it to alert mode. But that's about it.
Correct me if I'm wrong.

Anyway, side topic here.
Another question on NVT too.

Recently I've been updating softwares like ZAM, EIS and such.
I realise when NVT set to Alert mode, it prompt twice: one is exe and another one is TMP.
Is that normal? Thought NVT wouldn't block/alert those non-exe?

 

[Deleted member 178]

NVT doesn't block exploit, but it monitors the child processes, that is maybe why the tmp files are detected.

 

[jamescv7]

@Azure Phoenix: Yes it has a basic anti-exploit functionality [Voodoshield], @Umbra manage to answer your question.

@CMLew: Yes NVT is a anti-exe at its own built.