Anyone Tested DriveSentry?

Do you know where do they get the virus fingerprints?
It is a hips, not AV!
(They claim to have appr. 10^6 of them, its a lot)

 

To me it was a sign -just a sign- that DriveSentry offered me No Significant Additional security.
If it was -Always- OA that alerted me for something -well Before- DriveSentry did,
then, what's reason for using DriveSentry?
Some additional Registry protection?
In that case, I would prefer a solid HIPS over DriveSentry.

 

Do you believe that DriveSentry is strong enough to be your only HIPS?
I wouldn't trust DriveSentry to be my Stand-Alone (= Only) HIPS application.

Like said by Omnitech, I trust more
-the Firewall-HIPS: OA & Comodo,
-the Behavior Blockers-HIPS: ThreatFire & Mamutu, and
-the Classic-HIPS: ProSecurity & SSM.

 

That's almost specious, asking this on Wilders since, since, to take as an exemple, one of our giga-threads like "what is your security setup these day", I wouldn't be surprised if - regarding drivesentry or any other hips - most of us would express this very same doubt about their using their own favorite hips as a stand-alone protection.

 

I think they all have their strengths / weaknesses. ako I'm not sure where they do but I use a great public malware site which I wish I could post the URL but I would get banned... PM might work

This site has over 250,000 malware samples and I test most of the leading security tools against them. I always make sure that whatever tool I test I disable net connection. This is done so the security product cannot use any malware databases and I get a HIPS/Behavioral result.

As I've said before in my tests, Threatfire and Drivesentry detected alot of malware. Many of the HIPS tools do detect threats but they are too noisy for the average users so its easy to miss a real threat.

I will run Drivesentry standalone when it traps MBR attacks, process starts and network traffic.

~interact

 

I believe that is too early to say that DriveSentry is as good as or better than
the well-known/established HIPS I mentioned before.
DriveSentry still has some way to cover.
If some of us doubt about the strength/effectiveness of the well-known HIPS,
then, we definitely have more reasons to doubt about DriveSentry.
Time will tell. We will see how many users will replace their current HIPS with DriveSentry
and how many of them will finally keep it and will not go back to the HIPS they had before.
We'll see...

 

Hi SecOminus

Given the obvious efficiency EQSecurity is proven in comparisons to other classical HIPS i'm curious why you fail to even mention it in the same company of others.

Do you find it not up to the standards of the others? Is there some things in it's security protections that you find not dependable enough?

Just curious since EQS is actively vastly improving it's core HIPS flagship program, and it's rules can be effectively configured to cover nearly if not all the items of concern that other HIPS monitor, not only that but it's been proven EQS is by far and away the Litest HIPS in comparison.

Thanks EASTER

 

Next version of DriveSentry which fixes the mem leak and other things will be available on Monday. The DS guys have told me that it's a few days late as they've been busy with a major new retail deal. They also have a fancy new website.

More information on the deal here -> http://blog.drivesentry.com/2008/04/pc-world-chooses-drivesentry-for.html

~interact

 

I installed DriveSentry but whenever I then loaded my TrueCrypt container and tried to run programs from the TrueCrypt container, DriveSentry crashes.

Anyone else experience that?

 

Not with Drive Sentry, but I can tell that TrueCrypt makes me crash system with XP Pro ( SP2 and now SP3 ) and System Safety Monitor or PS. I think the problem is TrueCrypt.

 

Right after I installed DS and ran it,
a cold greeting with a blue screen.

Scared to give another shot.

 

here too i have to deleted after 5 minutes

 

I have been running TrueCrypt container without any problems for months. Yet when I installed DriveSentry, DriveSentry would not load any applications that are installed into my TC container, and after awhile, as nothing happens, then DriveSentry crashes.

So it's definitively not TC issue, it's an issue with DS.

I emailed DS with the issue.

 

Yeah, I removed DriveSentry too. My Vista was running fine until I installed DS, then everything turned to mush as I couldn't load anything from my TrueCrypt container once I mounted it.

DS has an issue with TC for sure.

I won't install DS again, it gave me such a headache.

 

you tell me