Reply to thread

Message

<blockquote data-quote="Windows_Security" data-source="post: 791108" data-attributes="member: 50782">[USER=76851]@WiseVector[/USER] Eason, I applaud your company for joining this forum and reserving resources (you) to discuss your product with forum members.I can remember a behavioral blocker called ThreatFire being blinded by a PoC of a hacker (forgot his exact name, but his nickname was EPXOF or something). This PoC simply unhooked all user land hooks TreatFire had set to monitor exeutable behavior.Threatfire had earned a reputation in security forums as a good add-on after turning from a paid product (CyberHawk) into a free product. Many of those fans jumped ship after ThreatFire being passed by PoC malware a few times (EPXOF made a few variants to proof his point).I have a question and a tip for you:QuestionHas WiseVecto protection mechanisms against software trying to unhook the userland hooks (making it blind for AI-learning and effectively paralyzing WiseVector defenses)?TipHistory tends to repeat itself, so when answer to above question is no or partly. Please consider that you have competitors in global markets and one of them is known for its aggressive marketing tricks (a company which sounds like &#039;silence&#039; with A instead of the E in the second syllable).Imagine how much free publicity you would provide them when they create a targeted PoC which unhooks WiseVector learning mechanims. Also imagine how much damage to the product reputation and brand name that would cause.In the past Chinese Browser and AV-vendors expanded their competition to the PC&#039;s of their customers by de-installing software of rivaling products, so you might not even need an American competitor to harm your brand reputation.When your answer was no or partly I would urge to put &quot;user land unhooking&quot; protection on your development calendar, when you plan to use (happy user) ambassador/evangelist marketing.Regards Kees</blockquote>

[QUOTE="Windows_Security, post: 791108, member: 50782"] [USER=76851]@WiseVector[/USER] Eason, I applaud your company for joining this forum and reserving resources (you) to discuss your product with forum members. I can remember a behavioral blocker called ThreatFire being blinded by a PoC of a hacker (forgot his exact name, but his nickname was EPXOF or something). This PoC simply unhooked all user land hooks TreatFire had set to monitor exeutable behavior. Threatfire had earned a reputation in security forums as a good add-on after turning from a paid product (CyberHawk) into a free product. Many of those fans jumped ship after ThreatFire being passed by PoC malware a few times (EPXOF made a few variants to proof his point). I have a question and a tip for you: Question Has WiseVecto protection mechanisms against software trying to unhook the userland hooks (making it blind for AI-learning and effectively paralyzing WiseVector defenses)? Tip History tends to repeat itself, so when answer to above question is no or partly. Please consider that you have competitors in global markets and one of them is known for its aggressive marketing tricks (a company which sounds like 'silence' with A instead of the E in the second syllable). Imagine how much free publicity you would provide them when they create a targeted PoC which unhooks WiseVector learning mechanims. Also imagine how much damage to the product reputation and brand name that would cause. In the past Chinese Browser and AV-vendors expanded their competition to the PC's of their customers by de-installing software of rivaling products, so you might not even need an American competitor to harm your brand reputation. When your answer was no or partly I would urge to put "user land unhooking" protection on your development calendar, when you plan to use (happy user) ambassador/evangelist marketing. Regards Kees [/QUOTE]

Verification