hjlbx 2 Report post Posted December 17, 2014 I was wondering if EAM/EIS will alert if certain types of changes are attempted to made to the registry? It's not clear if the Behavior Blocker has this capability. If it does not I think I understand why such functionality is much better suited to OA (HIPS). Thanks, hjlbx Quote Share this post Link to post Share on other sites
Christian Peters 99 Report post Posted December 17, 2014 Hello, yes it will if it is a malicious behavior that is known by the internal Behavior Blocker rule set. The Behavior Blocker will not give you a alert on a non-malicious action like the OA HIPS did. Quote Share this post Link to post Share on other sites
hjlbx 2 Report post Posted December 18, 2014 Hello Christian, Thanks hjlbx Quote Share this post Link to post Share on other sites
Christian Peters 99 Report post Posted December 18, 2014 Hello, you are welcome. Quote Share this post Link to post Share on other sites
