hjlbx 2 Posted December 17, 2014 Report Share Posted December 17, 2014 I was wondering if EAM/EIS will alert if certain types of changes are attempted to made to the registry? It's not clear if the Behavior Blocker has this capability. If it does not I think I understand why such functionality is much better suited to OA (HIPS). Thanks, hjlbx Quote Link to post Share on other sites
Christian Peters 99 Posted December 17, 2014 Report Share Posted December 17, 2014 Hello, yes it will if it is a malicious behavior that is known by the internal Behavior Blocker rule set. The Behavior Blocker will not give you a alert on a non-malicious action like the OA HIPS did. Quote Link to post Share on other sites
hjlbx 2 Posted December 18, 2014 Author Report Share Posted December 18, 2014 Hello Christian, Thanks hjlbx Quote Link to post Share on other sites
Christian Peters 99 Posted December 18, 2014 Report Share Posted December 18, 2014 Hello, you are welcome. Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.