Recommended Posts

Dear Support,


What do you think about adding this option to the Behaviour Blocker?


Auto resolve, notifications for threats only for USER DECISION. (Not will be quarantined in 10s)
I think the option helps to reduce false and improve user experience.

Share this post


Link to post
Share on other sites

I don't quite understand.  "Auto resolve" means the BB /decides what to do/... so there's no scope for the user or anyone else to make a decision - it's already been made.

If you want to have the opportunity to make your own decision, you need to set "Alert".

Share this post


Link to post
Share on other sites
1 hour ago, Batman said:

With "Alert", EAM does not check suspicious program via Anti-Malware Network.

It does. When something is detected by signatures you'll see an alert. Other things that looks suspicious to behavior blocker, it'll check for reputation on Emsi cloud and if its marked as safe in the cloud then the action will be allowed automatically. 

Share this post


Link to post
Share on other sites
3 hours ago, Batman said:

With "Alert", EAM does not check suspicious program via Anti-Malware Network.

Perhaps you don't have Settings -> Advanced -> "Look up reputation of programs", turned on?

Share this post


Link to post
Share on other sites
On 6/7/2020 at 5:55 AM, SeriousHoax said:

It does. When something is detected by signatures you'll see an alert. Other things that looks suspicious to behavior blocker, it'll check for reputation on Emsi cloud and if its marked as safe in the cloud then the action will be allowed automatically. 

That's correct. When set to "Alert" the BB will only display alerts for unknown applications. Anything known to be safe will still be allowed automatically. This behavior can be tweaked in the Advanced Settings using enabling/disabling the options Automatically allow programs with good reputation and Automatically quarantine programs with good reputation.

image.png
Download Image

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.