Re:NirSoft Freeware (2008)
by voltagex_ on Monday April 16, 2018 @08:11PM
(#16854214)
Is there much behaviour analysis done by consumer AV? Even Defender seems to be mostly signature based.
[ Parent
| on HN ]
Re:NirSoft Freeware (2008)
by neko_koneko on Tuesday April 17, 2018 @04:50AM
(#16856586)
Yep. Malware is constantly repacked/encrypted. It is impractical/impossible to write static unpacking engines for every type of malware packing technique, so behavioral analysis engine is a must (btw, behavioral engines still detect malware using signatures).