Author Topic: Amazing response time from CyberCapture! :)  (Read 2960 times)

0 Members and 1 Guest are viewing this topic.

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Amazing response time from CyberCapture! :)
« on: October 10, 2016, 07:47:06 PM »
Just had CyberCapture invoked on a very new unique file (project I work with someone) and I said to myself, I'll let it be analyzed just for fun to see how long it'll take. Was expecting like half an hour wait time and then like 30 seconds later I already got the verdict from CyberCapture server. The file was clean. I have to say, that's pretty amazing response time! :D
If this remains the norm and detection capabilities go up, we are looking into pretty amazing security feature.
Visit my webpage Angry Sheep Blog

Offline Secondmineboy

  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 3645
Re: Amazing response time from CyberCapture! :)
« Reply #1 on: October 10, 2016, 07:53:33 PM »
Now they need to checlk ALL Files from anywhere they are coming and just keep behind it to optimize it :)
Windows 10 1909, 4 GB DDR3 RAM, 500 GB 5400 RPM HDD, 1366 by 768 LCD Screen, Intel Core i3 5010U Dual Core, Intel HD Graphics 5500
HUAWEI P30 Pro. Android 10

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9406
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re: Amazing response time from CyberCapture! :)
« Reply #2 on: October 10, 2016, 08:30:34 PM »
They should certainly include more vectors, like USB/external drives. Local may indeed prove to be a bit taxing and problematic. I mean, every time I compile an EXE and test it, it would get sent to CyberCapture, annoying me and annoying avast! team because it's placing unnecessary load on the CyberCapture servers. But yeah, if they can include more conditions when files are captured with CyberCapture so it won't be just HTTP(S), then it'll be better.
Visit my webpage Angry Sheep Blog

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37533
  • Not a avast user
Re: Amazing response time from CyberCapture! :)
« Reply #3 on: October 10, 2016, 08:41:35 PM »
Interesting read here from F-Secure blog how machine learning work

What’s The Deal With Machine Learning?
https://labsblog.f-secure.com/2016/08/26/whats-the-deal-with-machine-learning/

CrowdStrike Machine Learning and VirusTotal
https://www.crowdstrike.com/blog/crowdstrike-machine-learning-virustotal/

« Last Edit: October 11, 2016, 04:25:08 PM by Pondus »

Offline Alikhan

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2220
Re: Amazing response time from CyberCapture! :)
« Reply #4 on: October 10, 2016, 09:27:15 PM »
CyberCapture needs to target other file types other than exe too such as js files since they are becoming used more now to spread malware.
Windows 10 Home 64-bit • Avast Free (latest stable version) •  Malwarebytes 4 Premium (On-Demand) • Windows Firewall Control • Google Chrome • LastPass • CCleaner • O&O ShutUp10 •

REDACTED

  • Guest
Re: Amazing response time from CyberCapture! :)
« Reply #5 on: October 11, 2016, 01:09:41 AM »
I'm really liking how quick and light cybercapture works in Avast. Doesn't slow down my apps, especially new indie steam games :)

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: Amazing response time from CyberCapture! :)
« Reply #6 on: October 11, 2016, 04:19:10 PM »
How I'm glad to see sunny days in the horizon!
Thanks RejZor for your posting.
Let's hope and assume that Avast + AVG features and engines will bring us further on proactive protection  8)
The best things in life are free.

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37533
  • Not a avast user
Re: Amazing response time from CyberCapture! :)
« Reply #7 on: October 11, 2016, 04:45:43 PM »
CyberCapture needs to target other file types other than exe too such as js files since they are becoming used more now to spread malware.

From Trend Micro > https://blog.trendmicro.com/top-5-myths-next-gen-endpoint-protection/
==============================================================================
Machine learning is good at blocking threats hidden in executable files, but struggles in detecting threats hidden in non-executable files, such as malicious scripts in PDFs or Word documents.
==============================================================================