HIPS and Windows 7

Kees1958 · Nov 7, 2009

Ha with Sully's PGS you can do path rules and application name rules and wild cards. I agree that publisher rules are a great enhancement.

To check whether a program has a useable publisher id, just right click the exe, click the tab digital signatures.

NormanF · Nov 7, 2009

I tried PE Guard 1.2. Will have to wait for an updated version since it keeps crashing Windows 7 when you click anywhere in Windows!

arran · Nov 10, 2009

ssj100 said:

Just following up on this. Out of curiosity, I've tested AE 2.3 against SRP, and got some rather interesting results:
1. AE 2.3 on "Low" setting - SRP blocks execution of the malware file first
2. AE 2.3 on "High" setting - AE 2.3 blocks execution of the malware file first - and I've got no idea why!

So there you have it - if anti-executable software was classified as a type of HIPS, then my statement (in the above quote) is wrong! AE 2.3 set on "High" is faster at blocking file execution than SRP.

And here's my attempt to get back on topic haha - does anyone know if AE 3 works on Windows 7?
Click to expand...

So what types of executables does SRP block? does it also block javascript executables?

Log in or Sign up

HIPS and Windows 7

Kees1958 Registered Member

NormanF Registered Member

arran Registered Member

Log in or Sign up

HIPS and Windows 7

Kees1958 Registered Member

NormanF Registered Member

arran Registered Member

Useful Searches