Reply to thread

Message

<blockquote data-quote="ForgottenSeer 100397" data-source="post: 1069740">Based on my experience, most average users don&#039;t access or care about the GUI. I disagree that average users would have problems with the new features or settings. The new features, Attack Chains or Windows Sandbox, are primarily useful for advanced or WS users. The Attack Chains section is like the Command Lines section and may replace it.In my experience, average users won&#039;t or don&#039;t use sandbox-like features. Default in CL should disable the Windows Sandbox feature, and the WS option should be unavailable on alerts.CL can have an Expert/Simple Mode button at the bottom left. The button label will display either &quot;simple&quot; or &quot;expert&quot;, depending on the current mode. In expert mode, CL will display advanced sections and options, such as attack chains or custom folders. In simple mode, CL will hide advanced sections and options, such as automatically allowing items that match a digital signature in the whitelist snapshot or automatically scanning the child processes of allowed parent processes.</blockquote>

[QUOTE="ForgottenSeer 100397, post: 1069740"] Based on my experience, most average users don't access or care about the GUI. I disagree that average users would have problems with the new features or settings. The new features, Attack Chains or Windows Sandbox, are primarily useful for advanced or WS users. The Attack Chains section is like the Command Lines section and may replace it. In my experience, average users won't or don't use sandbox-like features. Default in CL should disable the Windows Sandbox feature, and the WS option should be unavailable on alerts. CL can have an Expert/Simple Mode button at the bottom left. The button label will display either "simple" or "expert", depending on the current mode. In expert mode, CL will display advanced sections and options, such as attack chains or custom folders. In simple mode, CL will hide advanced sections and options, such as automatically allowing items that match a digital signature in the whitelist snapshot or automatically scanning the child processes of allowed parent processes. [/QUOTE]

Verification