SparkCognition DeepArmor

[mekelek]

They need Guinea Pigs, not testers...

Yeah I'm starting to doubt that DeepArmor Home is even happening. Everyone only ever received the DeepArmor Enterprise Client....

I'm fine being a guinea pig if they actually let me be one...

 

[Sunshine-boy]

Let them beg yours to be a beta tester for them ... You guys begging them such losers you are
they should come here and ask malware tips community to help them..it doesn't matter its AI or next gen security... I think they don't show any respect to yours..Keep begging

 

[mekelek]

Let them beg yours to be a beta tester for them ... You guys begging them such losers you are
they should come here and ask malware tips community to help them..it doesn't matter its AI or next gen security... I think they don't show any respect to yours..Keep begging

nobody is begging here, begging would be spamming their support email for an invite... like they actually read this forum, they don't even read the application emails.

 

[Anathor21]

Greetings - new here...

I have been running DA for the last few months... haven't had any confirmed positives yet, had a couple false positives and emailed Spark regarding these and asked about beta community and was sent here (not a bad thread to read up on).

Anyway, just saying "hello" and I'd love to hear back from others doing the beta on such topics as what confirmed positive hits and false positives as well. I'm trying to come up with a clear method of clearing the false positives quickly (i.e. something I can explain to my wife who frankly doesn't care to take much time to investigate - currently telling her to allow it to block all and let me know to investigate...).

 

[HarborFront]

So still no news of when it'll be officially released?

BTW does DA

1) Scans the file while downloading
2) Scans the file after its being downloaded
3) Scans the file when it's being accessed

Thanks

 

[simmerskool]

So still no news of when it'll be officially released?

BTW does DA

1) Scans the file while downloading
2) Scans the file after its being downloaded
3) Scans the file when it's being accessed

Thanks

My understanding from my limited beta experience... It seems to scan webpages and there's a noticeable slowdown surfing, so I assume it scans files downloading, but I could be wrong. It does not scan on-demand. I does scan files that are being accessed ie being executed. I have not heard anything new about updated beta other than what I previously reported that a new beta is coming soon (but undefined timeline at least to me). Other beta users are (I think) more knowledgeable. I continue to have it installed and it autostarts when I login as admin, but when I run SUA it does not autostart and lately I have not been using it regularly as it impairs performance somewhat. Right now, DA36 seems more prone than other security layers to false positives, IMO. I like the concept and if and when I get updated beta I'll test it more deeply.

 

[HarborFront]

My understanding from my limited beta experience... It seems to scan webpages and there's a noticeable slowdown surfing, so I assume it scans files downloading, but I could be wrong. It does not scan on-demand. I does scan files that are being accessed ie being executed. I have not heard anything new about updated beta other than what I previously reported that a new beta is coming soon (but undefined timeline at least to me). Other beta users are (I think) more knowledgeable. I continue to have it installed and it autostarts when I login as admin, but when I run SUA it does not autostart and lately I have not been using it regularly as it impairs performance somewhat. Right now, DA36 seems more prone than other security layers to false positives, IMO. I like the concept and if and when I get updated beta I'll test it more deeply.

Actually, you assume it scans file during downloading. Can confirm by downloading a file and see whether DA kicks in during the downloading?

How about auto scanning a file immediately upon downloaded i.e. by default?

 

[simmerskool]

Actually, you assume it scans file during downloading. Can confirm by downloading a file and see whether DA kicks in during the downloading?
How about auto scanning a file immediately upon downloaded i.e. by default?

...the way DA works or the way I think it works, if I download a good file, nothing happens. I'd have to intentionally try to download a malware file to see if DA alerts, but other layers on this pc would prevent that. I tried to download eicar the other day for something else, and their website was blocked, I think out at my router level. But you are correct, I'm not 100% sure about DA scanning / analyzing incoming files. Since it scans URLs, I assume it scans files on URLs, but ...???

 

[HarborFront]

...the way DA works or the way I think it works, if I download a good file, nothing happens. I'd have to intentionally try to download a malware file to see if DA alerts, but other layers on this pc would prevent that. I tried to download eicar the other day for something else, and their website was blocked, I think out at my router level. But you are correct, I'm not 100% sure about DA scanning / analyzing incoming files. Since it scans URLs, I assume it scans files on URLs, but ...???

How does DA knows if the file you download is good or bad in the first place without some sort of scanning/checking?

I read some where that DA do not have a scan button so it's not possible to perform a demand scan

However, I'm not sure whether it scans during the downloading of a file, automatic immediate scanning when the file is being downloaded and how about when you accessed a file?

Do you think you can email DA to get some replies? Would appreciate very much.

Thanks

 

[Deleted Member 3a5v73x]

@HarborFront Since I have abandoned the product becouse of non-existent staff from DeepArmor, I could post/link here all DeepArmor's User Guide, everything is written there how it works, but I must make sure first with MT staff if it's right to do.

 

[Parsh]

From their Enterprise product description:

File Reputation and Application Control
Like traditional signature-based solutions, DeepArmor filters out known malicious and benign files based on file reputation or application whitelists / blacklists

Multi-Vector Machine Learning
For unknown files (e.g., zero-days, polymorphic), DeepArmor uses an ensemble of machine learning algorithms to extract, analyze and score the characteristics of each file

Natural Language Processing
After a threat is detected, DeepArmor crowdsources threat intelligence data and leverages natural language processing (NLP) to generate in-context descriptions and remediation

Detection and Respond
Finally, DeepArmor blocks threats with kernel-level execution control, and quarantines infected files before they can breach your system

@HarborFront From my usage experience of DA36 Beta (till 2 months back), it only scans files that are being executed. Unknown files about to run are paused, scanned and verified as per the above mentioned procedure and alerted about if needed.

 

[HarborFront]

@HarborFront Since I have abandoned the product becouse of non-existent staff from DeepArmor, I could post/link here all DeepArmor's User Guide, everything is written there how it works, but I must make sure first with MT staff if it's right to do.

Thank you. It's ok @Parsh has explained it

 

[Deleted Member 3a5v73x]

@HarborFront

Here is the DeepArmor's User Guide. No personal information is included so it should be fine.

 

[simmerskool]

How does DA knows if the file you download is good or bad in the first place without some sort of scanning/checking?

I read some where that DA do not have a scan button so it's not possible to perform a demand scan

However, I'm not sure whether it scans during the downloading of a file, automatic immediate scanning when the file is being downloaded and how about when you accessed a file?

Do you think you can email DA to get some replies? Would appreciate very much.

Thanks

my understanding, when you open an exe that is uniknown or that it has not whitelisted, it sends it to cloud where it's analyzed by its Ai, and if Ai thinks it's bad you get an alert with a probability score. this happens relatively fast. There is no scan button on DA36_beta.

EDIT: I see that answers posted before mine, basically agree. (I posted before I saw the others)

 

[Kubla]

Any updates on this software?

Is the development still on going?

If so is it going to be released soon?

 

[shmu26]

Any updates on this software?

Is the development still on going?

If so is it going to be released soon?

I got an email today from them:

Mitch Harrison (SparkCognition)

Oct 23, 09:31 -05

The new version will be release in the upcoming weeks. We are still making it perfect for consumers.

 

[paulderdash]

I got an email today from them:

Mitch Harrison (SparkCognition)

Oct 23, 09:31 -05

The new version will be release in the upcoming weeks. We are still making it perfect for consumers.

Will you let us know when you get it? I am not sure I have the latest version.

 

[shmu26]

Will you let us know when you get it? I am not sure I have the latest version.

I don't actually have it installed right now. @_CyberGhosT_ is your man.

 

[_CyberGhosT_]

Will you let us know when you get it? I am not sure I have the latest version.

Interesting, maybe coming out of beta for the (Home) version soon ?
See now here is where I start paying attention, the best way, or a good way, is to follow Amir Housain on twitter, and check the site now weekly for news.
Very cool, thanks @paulderdash

 

[brambedkar59]

I got an email today from them:

Mitch Harrison (SparkCognition)

Oct 23, 09:31 -05

The new version will be release in the upcoming weeks. We are still making it perfect for consumers.

I also signed up for the beta (home edition) today. Should get the key in coming next couple of weeks.