HIPS v Anti-executable

Discussion in 'Returnil releases' started by Dregg Heda, Jun 21, 2009.

Thread Status:
Not open for further replies.
  1. Dregg Heda

    Dregg Heda Registered Member

    Joined:
    Dec 13, 2008
    Posts:
    830
    How does the AE module in returnil differ from a full blown HIPS? Thanks.
     
  2. Coldmoon

    Coldmoon Returnil Moderator

    Joined:
    Sep 18, 2006
    Posts:
    2,981
    Location:
    USA
    The main difference is that it is extremely targeted towards providing protection against malware that can circumvent virtualization and as a result does not include more generalized protection features in a full blown HIPS program. This is why it may be a redundant feature for those already using HIPS.

    Mike
     
  3. Dregg Heda

    Dregg Heda Registered Member

    Joined:
    Dec 13, 2008
    Posts:
    830
    Ah ic, thanks.
     
Thread Status:
Not open for further replies.