4 ms·
It's likely they are using an engine based almost entirely on run-time heuristics - that is, stopping malware when it behaves suspiciously. VirusTotal does "sca
by iancarroll 10y ago
It's likely they are using an engine based almost entirely on run-time heuristics - that is, stopping malware when it behaves suspiciously. VirusTotal does "scan-time" analysis of files where the file is never run, only checked against AVs. If they have no "traditional" signatures, they wouldn't be compatible with this method.
- pandemicsyn 10y agoYup, that seems likely. Their whole shtick is that signature based checks don't cut it and that their behavior based system is the way to go. https://en.wikipedia.org/wiki/SentinelOne#Technology https://en.wikipedia.org/wiki/SentinelOne#Technology https://www.sentinelone.com https://www.sentinelone.com
- sjg007 10y agoSure but then generate a signature and submit it.
- iancarroll 10y agoIt's not really that easy...
- sjg007 10y agoIt's not that hard.