CyberCapture is a default-deny with cloud submission and analysis, hardened mode is a whitelist/file reputation. What he is asking for is the Identity protection behavior blocker. Deepscreen is the one that most looks like this, it runs the program and checks what it does. But i feel that it is not good enough. For me it is not like a BB since it runs the program for a limited time and i guess the only function is to decloak obfuscated malware.