Avast WEBforum

Avast Products => Avast Free Antivirus / Pro Antivirus / Internet Security/ Premier => Topic started by: Patrick2 on January 11, 2019, 09:30:14 PM

Title: Behavior Shield Advanced Threat Protection
Post by: Patrick2 on January 11, 2019, 09:30:14 PM
Windows 10 Pro x64bit
Avast 19.1.2360

Behavior Shield Advanced Threat Protection,  when sharing data is unchecked in the Personal Privacy area,  then that is greyed out, when the data sharing is checked, it's not greyed out,  Why does it need it seems data sharing on with 3rd parties?  and Which 3rd parties is this data shared with?    Thank you, Longtime user Patrick
Title: Re: Behavior Shield Advanced Threat Protection
Post by: TheSharku on January 11, 2019, 09:47:04 PM
MartinZ told it uses 3rd party service to find phony processes.
Title: Re: Behavior Shield Advanced Threat Protection
Post by: Patrick2 on January 11, 2019, 09:51:44 PM
Yeah so maybe nothing to worry on perhaps, but was still a bit curious
Title: Re: Behavior Shield Advanced Threat Protection
Post by: TheSharku on January 11, 2019, 10:08:10 PM
Hopefully...
Title: Re: Behavior Shield Advanced Threat Protection
Post by: RejZoR on January 12, 2019, 01:39:10 AM
MartinZ told it uses 3rd party service to find phony processes.

Wouldn't hurt if they explained what 3rd party services and in what way. Till now CommunityIQ was required for advanced protection so I naturally only used that and had everything else off. Which disabled this new feature and I didn't even know about it.
Title: Re: Behavior Shield Advanced Threat Protection
Post by: Patrick2 on January 12, 2019, 02:18:55 AM
Yeah would be nice if they explained which 3rd party services, and what way for sure, who knows if will ever get an explanation though, and I didn't know about this feature til this morning when was checking out 19.1 more
Title: Re: Behavior Shield Advanced Threat Protection
Post by: RejZoR on January 12, 2019, 12:10:06 PM
Yeah would be nice if they explained which 3rd party services, and what way for sure, who knows if will ever get an explanation though, and I didn't know about this feature til this morning when was checking out 19.1 more

Same. I don't remember it even being mentioned in any changelog for new versions... And there is no mention that this feature being greyed out because that setting under Privacy is disabled, but needs to be enabled.
Title: Re: Behavior Shield Advanced Threat Protection
Post by: TheSharku on January 12, 2019, 01:54:17 PM
It would have to be quite new, I think. In the last version with the old settings, there was nothing like this in Behavior Shield settings.
Title: Re: Behavior Shield Advanced Threat Protection
Post by: bob3160 on January 12, 2019, 02:27:42 PM
MartinZ told it uses 3rd party service to find phony processes.

Wouldn't hurt if they explained what 3rd party services and in what way. Till now CommunityIQ was required for advanced protection so I naturally only used that and had everything else off. Which disabled this new feature and I didn't even know about it.
Referred to MartinZ. Let's see if that gets us a reply.
Title: Re: Behavior Shield Advanced Threat Protection
Post by: DavidR on January 12, 2019, 03:00:35 PM
MartinZ told it uses 3rd party service to find phony processes.

Wouldn't hurt if they explained what 3rd party services and in what way. Till now CommunityIQ was required for advanced protection so I naturally only used that and had everything else off. Which disabled this new feature and I didn't even know about it.
Referred to MartinZ. Let's see if that gets us a reply.

I can't see the point of having an in-line context menu Help function if this isn't described. 

OH, OH, seems that they have already got rid of the old very useful context sensitive help (the ? icon within sections), which is even worse.

I even tried the old F1 key for help but this is just generic, the path that Avast seem to be going down is bad, things being dumbed down, removal of some functionality and configuration being less flexible.
Title: Re: Behavior Shield Advanced Threat Protection
Post by: TheSharku on January 12, 2019, 03:04:35 PM
I can't see the point of having an in-line context menu Help function if this isn't described. 

OH, OH, seems that they have already got rid of the old very useful context sensitive help (the ? icon within sections), which is even worse.

I even tried the old F1 key for help but this is just generic, the path that Avast seem to be going down is bad, things being dumbed down, removal of some functionality and configuration being less flexible.

Time to riot?
Title: Re: Behavior Shield Advanced Threat Protection
Post by: bob3160 on January 12, 2019, 05:56:09 PM
I can't see the point of having an in-line context menu Help function if this isn't described. 

OH, OH, seems that they have already got rid of the old very useful context sensitive help (the ? icon within sections), which is even worse.

I even tried the old F1 key for help but this is just generic, the path that Avast seem to be going down is bad, things being dumbed down, removal of some functionality and configuration being less flexible.

Time to riot?
Can I watch ???
Title: Re: Behavior Shield Advanced Threat Protection
Post by: schmidthouse on January 12, 2019, 06:50:31 PM
MartinZ told it uses 3rd party service to find phony processes.

Wouldn't hurt if they explained what 3rd party services and in what way. Till now CommunityIQ was required for advanced protection so I naturally only used that and had everything else off. Which disabled this new feature and I didn't even know about it.
Referred to MartinZ. Let's see if that gets us a reply.

I can't see the point of having an in-line context menu Help function if this isn't described. 

OH, OH, seems that they have already got rid of the old very useful context sensitive help (the ? icon within sections), which is even worse.

I even tried the old F1 key for help but this is just generic, the path that Avast seem to be going down is bad, things being dumbed down, removal of some functionality and configuration being less flexible.

I certainly hope this is temporary, it's not a direction I would support!
Title: Re: Behavior Shield Advanced Threat Protection
Post by: TheSharku on January 12, 2019, 08:10:51 PM
Time to riot?
Can I watch ???

I wasn't very serious, but it's good if users tell their opinions out loud.
Title: Re: Behavior Shield Advanced Threat Protection
Post by: Patrick2 on January 12, 2019, 09:00:54 PM
Prays It's Temporary,  not a direction i would support either myself,  Nearly Switched the Systems early this morning over to Windows 10 built in Defender, but decided well guess just telemetry with the Allow 3rd party data sharing on to have that advanced protection, so far leaving it installed, just hopefully i don't change my mind again lol
Title: Re: Behavior Shield Advanced Threat Protection
Post by: RejZoR on January 13, 2019, 09:12:15 AM
MartinZ told it uses 3rd party service to find phony processes.

Wouldn't hurt if they explained what 3rd party services and in what way. Till now CommunityIQ was required for advanced protection so I naturally only used that and had everything else off. Which disabled this new feature and I didn't even know about it.
Referred to MartinZ. Let's see if that gets us a reply.

I can't see the point of having an in-line context menu Help function if this isn't described. 

OH, OH, seems that they have already got rid of the old very useful context sensitive help (the ? icon within sections), which is even worse.

I even tried the old F1 key for help but this is just generic, the path that Avast seem to be going down is bad, things being dumbed down, removal of some functionality and configuration being less flexible.

I disagree actually. Tons of settings were unnecessary before and way to extensive for no logical reason. New ones are much better quite frankly.

I do wonder how Hardened Mode works now given there is no more option between Moderate and Aggressive setting, it's just ON or OFF.
Title: Re: Behavior Shield Advanced Threat Protection
Post by: Asyn on January 13, 2019, 09:47:10 AM
I do wonder how Hardened Mode works now given there is no more option between Moderate and Aggressive setting, it's just ON or OFF.
-> https://forum.avast.com/index.php?topic=224223.msg1489862#msg1489862
Title: Re: Behavior Shield Advanced Threat Protection
Post by: RejZoR on January 13, 2019, 04:11:13 PM
I do wonder how Hardened Mode works now given there is no more option between Moderate and Aggressive setting, it's just ON or OFF.
-> https://forum.avast.com/index.php?topic=224223.msg1489862#msg1489862

So, entirely useless then. Great. Aggressive at least used extensive whitelist. Moderate just plops a block message for everything even tiny bit suspicious... Which is why I never used it coz it was more annoying than Aggressive...
Title: Re: Behavior Shield Advanced Threat Protection
Post by: igor on January 13, 2019, 05:01:42 PM
I do wonder how Hardened Mode works now given there is no more option between Moderate and Aggressive setting, it's just ON or OFF.
-> https://forum.avast.com/index.php?topic=224223.msg1489862#msg1489862

So, entirely useless then. Great. Aggressive at least used extensive whitelist. Moderate just plops a block message for everything even tiny bit suspicious... Which is why I never used it coz it was more annoying than Aggressive...

Can you elaborate a bit? I always thought the difference between moderate and aggressive was basically just the threshold (how popular the executable is)...
I'm not 100% sure about hash whitelisting, but I would guess it's the same... and I'm rather sure the digital-signature whitelisting is the same.
Title: Re: Behavior Shield Advanced Threat Protection
Post by: schmidthouse on January 13, 2019, 06:16:35 PM
Can someone address the question/s in the OP's original/first post.  :)
Title: Re: Behavior Shield Advanced Threat Protection
Post by: bob3160 on January 13, 2019, 07:37:31 PM
Can someone address the question/s in the OP's original/first post.  :)
I'm waiting for a reply in the developers forum which isn't likely to happen till Mon at the earliest.
Title: Re: Behavior Shield Advanced Threat Protection
Post by: schmidthouse on January 13, 2019, 10:04:23 PM
Can someone address the question/s in the OP's original/first post.  :)
I'm waiting for a reply in the developers forum which isn't likely to happen till Mon at the earliest.

+1  Yes :)
Title: Re: Behavior Shield Advanced Threat Protection
Post by: RejZoR on January 13, 2019, 10:40:12 PM
I do wonder how Hardened Mode works now given there is no more option between Moderate and Aggressive setting, it's just ON or OFF.
-> https://forum.avast.com/index.php?topic=224223.msg1489862#msg1489862

So, entirely useless then. Great. Aggressive at least used extensive whitelist. Moderate just plops a block message for everything even tiny bit suspicious... Which is why I never used it coz it was more annoying than Aggressive...

Can you elaborate a bit? I always thought the difference between moderate and aggressive was basically just the threshold (how popular the executable is)...
I'm not 100% sure about hash whitelisting, but I would guess it's the same... and I'm rather sure the digital-signature whitelisting is the same.

Hardened Mode in Moderate triggered even on legit apps just because they "behaved" suspiciously. Flipping it to Aggressive all of a sudden allowed them to run those, but blocked all that weren't whitelisted. It was actually much more bearable mode to live with thanks to whitelisting and also more secure at the same time because it blocked everything that wasn't whitelisted.

Or you guys just had Moderate mode entirely broken and wasn't even using whitelist for Moderate mode even though it should have. So, I really don't know how you have it set up now without the Moderate/Aggressive modes as selection.

I'd also appreciate the explanation of the new Advanced Threat detection feature that requires sharing with 3rd parties... We don't know what it shares and who are said 3rd parties...
Title: Re: Behavior Shield Advanced Threat Protection
Post by: bob3160 on January 13, 2019, 10:50:50 PM
@RejZoR,
Already asked for an answer in the Developers Forum. Hopefully we'll get a reply on Monday. :)
Title: Re: Behavior Shield Advanced Threat Protection
Post by: Be Secure on January 15, 2019, 09:41:33 AM
@RejZoR,
Already asked for an answer in the Developers Forum. Hopefully we'll get a reply on Monday. :)
Any update?
Title: Re: Behavior Shield Advanced Threat Protection
Post by: bob3160 on January 15, 2019, 11:36:45 AM
Nothing yet. I've posted that the Forum troops are getting restless. :)
Title: Re: Behavior Shield Advanced Threat Protection
Post by: MartinZ on January 15, 2019, 12:20:43 PM
We are testing cooperation with Morphisec. Currently in beta only.
Title: Re: Behavior Shield Advanced Threat Protection
Post by: bob3160 on January 15, 2019, 12:28:27 PM

Thanks Martin. :)https://www.morphisec.com/how-it-works (https://www.morphisec.com/how-it-works)
Title: Re: Behavior Shield Advanced Threat Protection
Post by: schmidthouse on January 16, 2019, 05:37:49 PM
I'd prefer to have an explanation on how this whole process works both within the UI and the 3rd. party sharing and how it all affects the "Advanced Threat Protection"
I am confused and don't see the answer. :-\
Title: Re: Behavior Shield Advanced Threat Protection
Post by: MartinZ on January 16, 2019, 06:24:52 PM
the connection to UI is that you can check the advanced protection ( in beta) but you can't do that if you have unchecked the privacy setting to share usage data with 3rd parties (in this case Morphisec) if you don't give us consent  we can't sent the data to Morphisec and therefore we can't turn on the feature. Does this explanation help?
Title: Re: Behavior Shield Advanced Threat Protection
Post by: schmidthouse on January 16, 2019, 08:15:36 PM
the connection to UI is that you can check the advanced protection ( in beta) but you can't do that if you have unchecked the privacy setting to share usage data with 3rd parties (in this case Morphisec) if you don't give us consent  we can't sent the data to Morphisec and therefore we can't turn on the feature. Does this explanation help?

Straight forward and very clear now for me.
Thanks Martin,
Appreciated  :)

Edit: I have checked the 'share usage data' box
Title: Re: Behavior Shield Advanced Threat Protection
Post by: RejZoR on January 17, 2019, 12:01:40 AM
The problem is, GUI doesn't tell user that privacy setting is what keeps that particular option from being selectable...
Title: Re: Behavior Shield Advanced Threat Protection
Post by: MartinZ on January 17, 2019, 02:33:06 PM
yes it is, but it's still in beta and we are still not sure when into prod.
Title: Re: Behavior Shield Advanced Threat Protection
Post by: soduy on January 17, 2019, 11:10:56 PM
yes it is, but it's still in beta and we are still not sure when into prod.

So when this "makes it past beta" the users will be forced to share their data with both security relevant and non relevant parties, if they want to obtain the maximum protection? Is that correct?

I'm just curious how disabling the "share data with 3rd parties" option affected the overall security of a device when it was disabled in Avast 18.x
Title: Re: Behavior Shield Advanced Threat Protection
Post by: mchain on January 18, 2019, 04:07:11 AM
@ soduy,

I believe Avast is one of the good guys.  If you don't trust them with your data, no one is forcing you to do so.
Title: Re: Behavior Shield Advanced Threat Protection
Post by: MartinZ on January 18, 2019, 10:47:51 AM
yes it is, but it's still in beta and we are still not sure when into prod.

So when this "makes it past beta" the users will be forced to share their data with both security relevant and non relevant parties, if they want to obtain the maximum protection? Is that correct?

I'm just curious how disabling the "share data with 3rd parties" option affected the overall security of a device when it was disabled in Avast 18.x

no effect on security level if you uncheck this in stable version
Title: Re: Behavior Shield Advanced Threat Protection
Post by: rocksteady on January 18, 2019, 11:35:20 AM
In my settings, Behaviour Shield, Advance Threat Protection is ticked.
Are we now saying it is also necessary to tick 3rd Party Data under Privacy?
i.e. here:
Title: Re: Behavior Shield Advanced Threat Protection
Post by: rocksteady on February 07, 2019, 09:40:17 PM
Any answer to this yet?
Title: Re: Behavior Shield Advanced Threat Protection
Post by: Be Secure on February 08, 2019, 05:03:31 AM
Any answer to this yet?
Quote
Are we now saying it is also necessary to tick 3rd Party Data under Privacy?
No.
New avast v.19.2.2364 this option is gone.https://forum.avast.com/index.php?topic=225096.0 (https://forum.avast.com/index.php?topic=225096.0)
Title: Re: Behavior Shield Advanced Threat Protection
Post by: MartinZ on February 08, 2019, 10:06:15 AM
we tested this feature in beta, but finally decided not to use it.
Title: Re: Behavior Shield Advanced Threat Protection
Post by: rocksteady on February 08, 2019, 11:32:24 AM
Thanks for replies.
Title: Re: Behavior Shield Advanced Threat Protection
Post by: Be Secure on February 08, 2019, 12:32:47 PM
we tested this feature in beta, but finally decided not to use it.
Good decision.
Title: Re: Behavior Shield Advanced Threat Protection
Post by: alanb on February 08, 2019, 01:49:00 PM
we tested this feature in beta, but finally decided not to use it.
Good decision.

+1
Title: Re: Behavior Shield Advanced Threat Protection
Post by: RejZoR on February 08, 2019, 11:38:27 PM
we tested this feature in beta, but finally decided not to use it.

Can you say what led up to that decision? The fact it required 3rd party communication or insignificant gains. Or both? Or something else?
Title: Re: Behavior Shield Advanced Threat Protection
Post by: MartinZ on February 25, 2019, 09:49:30 AM
Hi Rejzor,
both of them + business reasons. The incremental was too low to hassle.