Jump to content

czesetfan

Members
  • Posts

    121
  • Joined

  • Last visited

  • Days Won

    3

Posts posted by czesetfan

  1. On 11/28/2022 at 3:49 PM, itman said:

    Actually, it's Intel's Hardware Shield that performs this and it's only available on vPro supported processors. Again, refer to this: https://www.intel.com/content/www/us/en/architecture-and-technology/threat-detection-technology-brief.html for further details on Hardware Shield ransomware detection capabilities.

    The confusion comes from Intel referring to TDT and Hardware Shield in the same context. The Hardware Shield component only exists on 11th+ gen. processors with vPro capability.

    The outstanding question is how will Eset consumer versions, interfacing with Intel TDT supported processors that do not include Hardware Shield; i.e. non-vPro processors, be able to detect ransomware more effectively than currently exists?

    -EDIT- Answering my own question, below is the relevant extract from the above Intel linked article:

    As such, it will be Eset's full responsibility to properly deploy these "CPU-assisted capabilities" to detect ransomware behavior.

    On vPro platforms with Hardware Shield, it would be providing the initial telemetry that ransomware behavior has been detected to the EDR agent.

    Thank you for the information. I think I understand it more now.  🙂👍

  2. If I understand correctly. Intel TDT actually allows AV manufacturers to read telemetry data at the CPU level.
    So ESET uses this capability, but the decision algorithms themselves are in ESET's product. image.thumb.png.7dc570e7dfdf27f997ed2f0d84476fe8.png

    ESET's KB8336 indicates the supported processors for this feature.

    For Core vPro11+, is it ransomware detection that Intel's algorithms do within Intel prosesor itself?  🤔

     

  3. 7 hours ago, itman said:

    Here's a list of Intel processors that Eset ver. 16 will interface with in regards to Intel TDT: https://support.eset.com/en/kb8336-intel-threat-detection-technology-tdt-supported-processors?ref=esf .

    Many of those are not 11+ generation processors regardless of the whether they are Core vPro processors or not. As such at this time, it can be assumed that Eset consumer products will not be interfacing with the ransomware protection provided by Intel Hardware Shield. Perhaps that will only be done so for Eset business version products.

    I'm still not entirely clear on that either. 🤔 It seems to me that Intel and ESET's statements about processor support for ransomware protection are not clearly in agreement. It would require a more precise explanation.

  4. My opinion is that the ideal would be to leave the manual option to run the browser in "Secure mode", or without it by default. It's convenient because I know I'm running a more protected mode in the case of sensitive sites - banks and the like. I don't need it for viewing entertainment sites. 
    This separation is also good because the "Secure browser" has its own profile, i.e. settings, extensions used (also referred to by itman) etc. 👍

  5. 4 hours ago, Marcos said:

    It won't make sense to have the desktop shortcut then since no separate secure browser will exist.

     

    This is not good. 😕 I can understand removing automatic redirection, but why not leave it up to the user to choose whether they want to browse without or with increased security? Either running in secure browse all, or none at all times? That's a pretty ultimate choice. If I'm going through this, why would this choice exist in the first place? Then make it always and every time the browser is running Secure browsing, who would ever want to turn that off? 


    In my opinion, the option to launch the browser with Banking and payment protection when I require increased data protection should remain. As is currently possible. ✔️ :)

  6. On 10/27/2022 at 9:38 PM, czesetfan said:

    And will the Banking and payment protection button work?
    That is, I browse the web without the "green box" and when I want to visit a bank, I press the Banking and payment protection icon and browse with the additional protection.

    I repeat my question.
    Will the "Banking and payment protection" button be functional with "Secure all browsers" disabled after the redirection is cancelled ? 

  7. On 10/25/2022 at 2:08 PM, Marcos said:

    How other users would know if they can securely enter sensitive login information in the browser if they wouldn't know if a secure browser is running?

    "Secure all browsers" will be used in the future and the current redirection system will be abandoned since it requires a lot of maintenance and adapting to new browsers is not immediate.

    And will the Banking and payment protection button work?
    That is, I browse the web without the "green box" and when I want to visit a bank, I press the Banking and payment protection icon and browse with the additional protection.

  8. For corporate customers, ESET Protect templates are available for download at the link above. For individual customers I assume there is nothing like that. 🥴

    Of course unofficial configurations can be tracked down on other forums. But their promotion or support cannot be in line with official company policy. 

    The safest way is therefore to learn and manually create rules for HIPS and Firewall, which are then no problem to transfer to another PC. 👍

  9. On 9/13/2022 at 10:12 PM, Marcos said:

    Marcos' link to the Press-release article reads:

    Quote

    In the first round of releases, ESET will focus on endpoints with 9th Gen and newer Intel Core™ and Intel vPro Windows based PCs, which are capable of leveraging Intel TDT out-of-the-box.

    Some hope comes from the statement: In the first round of releases ... 

    This may mean that the range of supported devices will increase. But it will certainly be a limited range given the amount of hardware/processor variants in the world. It's a question of how it will be received that for someone this paid feature will work and for someone it won't. LiveGuard in ESSPremium works for everyone who has paid for the package. But for TDT it will depend on the specific hardware.

×
×
  • Create New...