ReHIPS

@ReHIPS good explanation. Indeed Appcontainer is all about the "capabilities" which are set by the Metro App developer; capabilities are areas of the system the App is allow to access to work properly.

a good explanation of Appcontainer here : https://blog.nextxpert.com/2013/01/31/demystifying-appcontainers-in-windows-8-part-i/

 

Is there a community list of applications caught by ReHIPS trying suspicious actions?

 

Like a malicious apps database? No. ReHIPS doesn't use Blacklisting so there is no need for it.

 

It could be of use for those wanting to play with the program on a VM, for example, to simulate a threat.

 

so just google for some malware sample sites, not difficult to find. Some youtests has been done on ReHIPS, no bypass yet.

 

You can find some on testmyav and also the other forum but you have to make 100 posts on the other forum to get at the samples.

 

this is major !

Also folder's isolation will be implemented.

 

Nice !

 

Explanations of ReHIPS Modes:

 

Just out of curiosity. Do you think this will be another program the US government stops using? Like they did with Kaspersky?

 

Was just wondering. Guess it home page just mentions ReHips meets the requirements of C2-level security of the U.S Department Of Defense, it doesn't say they actually use it. I read too much into it. https://rehips.com/en/
Right in technology box.

 

Ah I see just a marketing theme.

 

no you didn't understood.

Windows is the one meeting the requirements. Since ReHIPS uses only Windows' own security mechanism, so it inherits those requirements.

 

Now I need to try ReHIPS again. I am also running Appguard so may need some help.

 

@Trooper Then just add this ReHIPS process : "hipsagent64.exe" to AG's Power Apps.

also in Guarded Apps > folder > Settings you can add C:\rehips as "private."
and in User Space , you can also add it with the YES tag

 

Power apps? You mean Guarded Apps?

Also the reason I need to retry it is because of performance related issues.

 

no Customize > Advanced > Power Apps ( the goal is to whitelist ReHIPS in AG)

 

Doh! Thanks. Have never checked that tab out yet lol.

 

Do you have Power Apps in the Personal version of AppGuard?

 

Firefox blocks ReHIPS download just when the download is about to finish. Firefox says, "this file is disgusted as a helpful download, but it can make unexpected changes to your programs and settings". "You can search for an alternate download source, or try again later". I downloaded the installer from their website https://rehips.com/en/

 

If you have SRP which is what AppGuard provides, isn't ReHIPS redundant?

 

Maybe someone can report this to the developer if it has not been already. I'm not a member of their forum.

 

@Cutting_Edgetech or anyone

In case you are facing same google's false positives:

Spoiler: ReHIPS installer

https://www.upload.ee/files/7342094/ReHIPSSetup2.2.0.7z.html
https://nofile.io/f/sEgaJZrag5K/ReHIPSSetup2.2.0.7z
Pass: a6YeCnf:vsV+>>'75h3(MXM;`ykU_m>Dd82\pw~d6#)J#*vFw}&C`#QA_>E;

 

Sounds like the developer, or Google needs to get their act together.