Hacker News new | ask | show | jobs
by voltagex_ 2984 days ago
Is there much behaviour analysis done by consumer AV? Even Defender seems to be mostly signature based.
1 comments

Yep. Malware is constantly repacked/encrypted. It is impractical/impossible to write static unpacking engines for every type of malware packing technique, so behavioral analysis engine is a must (btw, behavioral engines still detect malware using signatures).