SentinelOne Review | Tested vs Malware
ฝัง
- เผยแพร่เมื่อ 2 มิ.ย. 2024
- SentinelOne is one of the leading next gen AI based security solutions for endpoints and one of the fastest growing companies in Silicon valley. How does it fare against malware?
▼ Links, Resources and Contact Information ▼
✉ Contact us for business: www.thepcsecuritychannel.com/...
🔥 Love the channel? Become a Patreon:
/ tpsc
🔥 Buy the best antivirus/security products with exclusive discounts and support this channel:
www.thepcsecuritychannel.com/buy
🔥 Join us on Discord and participate in our active community:
www.thepcsecuritychannel.com/...
▶️ See how your product performs in a Test vs Malware:
www.thepcsecuritychannel.com/...
▶️ Want to learn cybersecurity? Get started here:
www.thepcsecuritychannel.com/... - วิทยาศาสตร์และเทคโนโลยี
Thanks Leo for evaluating our platform! Great test.
For any technical questions from the audience, feel free to add your comments down here so we can answer.
SentinelOne hello, i work at a company where your product is used, the product seems good at what it is supposed to do and detects .docx malware and fishing emails very fast, do you provide sales for individuals? Or are your sales for corporate only?
Sentinelone,hello.. I wondered 2 things and wanted to ask..1-in the video, while python program was executing malwares one by one,we saw that the python script was blocked,too. the program was terminated after a while. Leo, wanted to execute it again, but after a while again it was terminated. in sentinelone security software, can the program decide by itself that the program is behaving malicious although it wasn't but it was just executing malicious programs for testing as in this video .i mean, is there artificial intelligence or similar technology in it so that it can decide by itself according to program's behaviour, to terminate or to go on allowing it? 2- after having malware attacks simultaneously, the program's user interface looked it began to have glitchers .For example, it looked frozen and was seen transparent likewise. Are there any plans to fix these kind of interface issues in soon future for this product, to make it more stable for example? Thanks for your answers from now.. I wish success to your company in this security product area.. Sincerely
@@leeroyjenki1687 Thanks for the feedback! Glad you liked it.
As of now, we don't offer home use licenses. We might do that in future!
@@metehangunaydn6295 Hi Metehan! About your 1st question: We don't treat a single file as malware, but the execution chain. With other products, they will flag something as malicious and will try to remediate it. The reality that if you do that, you are still exposed to malicious activity. With our technology, once the local engine see a script that is spreading malware, we will not only kill the malware, but we will stop the script, as this is what our users would expect. As for the UI - we will be looking at it - with that behing said, we don't consider such a stress test to be common to most of our user based.
SentinelOne Can I suggest you look in to not profits discounts or even pro bono.
Cant have Malware if nothing can be executed in the first place 😎
Truee O_)O
FUD vs Sentinel One = 15 - Love
SentinelOne: You will be terminated.
Me: Wait! Don't term.......
*Matrix glitched.*
Greetings Leo, the FalconEye, great vid, thanks! 😁👌🏻
dude i love these frequent uploads. thanks
We use this product and love it. The key to making it not "too aggressive" is to set it to only alert to suspicious activity, and block actual threats. Many legitimate programs perform similar actions to actual malware or hacking tools. Note that you can also disable protection temporarily from the control dashboard if you need to run more invasive utilities and applications that might trigger some of the behavioral detection. Also note that some of the settings that were enabled specifically state they will cause more false positives.
Thanks now I have something to watch can’t wait to see how it goes
Hi Leo, thanks you for testing all AV's capabilities. It really helps Decide what AV to go to. I wonder where did you get all that sample malwares? Is there a website that proves download malwares for testing. Thank you and more power to your channel.
great vid as always leo
Helo i have a question: there are these rescue disks from kaspersky and bitdefender etc. and there is this thong called media creation tool where you can create a ISO file to repair Windows. i used the Media Creation tool from WIndows to repair my PC once because it didnt want to boot into windows. And my question is now: What is better? These rescue disks from kaspersky or the Media Creatian tool from Windows? So i would like to know which one to use for what and which one is better.
Thanks
"how do you detect malware without detecting anything else" that's the point and it's also what I like in Emsisoft, things like process hacker etc aren't blocked and even if they are detected, you have an popup saying it can be malicious asking if you still want to open the file or not. That's one of the reason about why I like Emsisoft, great job !
Great video Leo. Thanks!
Thanks for your videos! You have a great method of testing these protection software packages and it really shows which paid and especially "free" packages are worth keeping installed. A lot of my students have to buy laptops for our programming courses and they pretty much all come installed with a free version of Mcafee. Not only is it very intrusive with its pop-ups, it also instantly deletes all of the .exe files that my students create during compiling of their code. I often give them the advice to uninstall the software and just use the windows defender (as it has become a lot better than back in the past, as long as you don't do anything stupid on the web or unleash 1700 malware applications on your computer) but I'd like to know if it actually does something useful. Kaspersky seems to be a solid choice, looking at your reviews? Thanks! Much appreciated! Cheers!
Would be interested in a test of Auslogics Anti-Malware, I can't find any info about it.
Would love to have an updated test on SentinelOne for 2022!
I know these are on a different level but curious on how does the Palo Alto and Cisco NGFW products compares about detection of malware transfer and/or network activities against the ones they let come in.
Thanks for the test - In most deployments the "Suspicious Threat" will be set to Detect mode. With the "Malicious Threat" in Protect mode as you have it. It would be great to see a test with the "Suspicious Threat" set to Detect mode. The things I have found useful with NGAV (ERD) paired with DNS Layer security is that ability to have deep visibility to nodes off the company network and the option to block URl's from phishing e-mail that made it through the spam filter to all employees. Thanks again for your video - Will you also be doing Carbon Black and Cisco AMP to round out the testing?
Thanks for the review. We had similar UI issues.
Thanks for testing, would be interesting to see a new in-depth test where you also examine the management capabilities. /Mike
Test Bitdefender Free edition vs Ransomware
I’m no expert on this but in my opinion. Bitdefender is one of the best. Heard many have said that the free version have same if not similar antivirus engine to its paid counterpart. It got good scanning speeds. And I tried some AV tests, not as professional as TPSC. I would report that, it have blocked all of the suspicious websites. And all of the test virus. (Not that a huge library, just under10) It even removed a virus testing program even I haven’t clicked on it. The ui was simple. Not much things. And it doesn’t download other services for you too(unlike avast, Kaspersky gave me password manager, vpn,quite a good addition tho)And it won’t say not buy their services makes you computer at risk
BD > KS
He had covered it already.
@@BaatPateK In the most recent tests (of the 2020 versions of Kaspersky and BitDefender), Kaspersky blocked everything, while BitDefender missed one trojan.
@@amritlohia8240 It was missed because the disinfect didn't finish.
@@amritlohia8240 Fake News
Great video, liked your analysis also, any chance you could do Cisco AMP?
Quick question how do you get the list of malware you are using to teste the SentinelOne agent? Thanks a lot.
3:22 That's pretty neat!
8:16 PM
11/23/2019
Hi Leo, this product seems to be an enterprise solution in that that type of environment is what you want so that downing any unwanted factors aren’t showing in that environment unfortunately that’s what you need to guard any unpleasantries. Fortinet has a feature where you block unsolicited items that you don’t want to show up in your environment and in a free version of this software for home users.
Correct. We kill tools that can be used for offensive. Any administrator can then decide to allow such tools with a granular option from the console, but by default, these are killed.
Yes, but he addressed that in the video. If that's what you want then this is an unnecessarily overengineered solution.
Finally someone with a brain!
@@eainen Sorry but you are wrong. There's nothing over-engineered with S1. If you were an engineer you will learn that you must design always in favor of safety. You don't want any false negative while accepting some false positive. The former does irreparable damage, the later is just a nuance. Let me know which one you will chose.
When are you testing Carbonblack? Thank you for testing various EDR and EPP solutions.
Hello Leo, congratulations for all the reviews videos! Can you try with Carbon Black too? I have the product if you need to try. Thank you very much.
AVG internet security 2019 review needed.
Great vid .... Can you test mobile antivirus too ?
What would you consider to be above average anti-spyware something that we should all use
Can you please compare Cylance and Crowdstrike? and may be other next gen av`s?
How about a test with avira av? head a while ago that it used avg stuff with extra things. was annoying with pop-ups but wanna see how it fares
Tpsc can you do a guide on getting these samples
Can you do an updated test against Sentinel One?
Are these new AI AVs dependant on internet? I have slow internet and it sometimes does not work.
Is Sentinel One just an over zealous ED-209 or Teminator?
Glad you did SentinelOne review and to see it terminated your malware script...it did it's job. This product is very interesting to me because it uses some AI and is signature-less. I will be deploying this in my small business next year. This video is very informative so thank you for sharing. I look forward to your future reviews on this product.
Thanks Dead! The way we treat malware is not as a single file or entity, but we kill the entire execution chain to ensure the device is protected. This is why the product "killed" the scripts as it identified the script as the source for the malware
Where can we get this malex script? Super handy.
can you give a link to the tools you use?
Kaspersky Total Security VS Bitdefender Total Security.
I believe this was already done here - check out if u like
BD > KS
He had covered it already.
@@BaatPateK I think people just want to see with the new, updated versions of the AV.
Bitdefender wins..fatality XD
kaspersky got a 100% detection rate in the last test while bitdefender didnt
Since your python was blocked, why didn't you manually run the programs it didn't detect while copying the MW folder to the desktop?
Why do you run CCleaner? If e.g a sample downloaded a MW in the temp folder (and added an autoruns key) you won't detect it unless the 2nd opinion scanner detect the key.
can you do a Trendmicro review? last one is 2 years old ;) thank you in advanced
Can you do an updated test on Webroot secure anywhere?
Will there be any updated ESET video? The previous one is almost a year old and I'm curious if anything have changed since the test day. Also on the begging of January my ESET license is ending and I'll have to decide whether to renew ESET license or switch to Kaspersky or BitDefender. It's 10 PCs, so I'd like to spend my money well.
There will likely be a new ESET review before that. ;)
@@pcsecuritychannel Great, thanks for the info! ;)
I've deployed SentinelOne in organizations and other than the UI glitch after hundreds of malware were run... I don't see an infection. Maybe there is one... But I didn't see it. I've personally never seen that UI glitch in my environments, also.
For a corporate product, I'll take a complaining phone call for a whitelist over ransomware.
Been there, done that, formatted the PC.
I don't work for SentinelOne, but I have deployed and used their product and it's been very good.
If you show me a corporate user who needs process hacker unless they're in a specific programming/development group that you setup a policy for, or one that needs to run python scripts that run malware in a corporate environment and I'd be a pretty surprised man.
I was thinking the same. Endpoints MUST be put behind bars and only execute from a whitelist so the users don't get any funny ideas (and funny software into the computer).
I happened to be looking for this on your channel yesterday.
Seems suspisous :)
0:10 I haven't seen one of the Animation thingies since 1997 when they stopped being popular
Hey Leo. Can you do an updated video of SentinelOne. Same with Crowdstrike. 2019 they were detecting poorly compared to current time.
Hi awesome channel, could you test fsecure, eset nod32, trend micro, gdata, avira?
plz suggest some complimentary software (preferably free) to use with bitdefender free, immunet is way to demanding on resources
please test bitdefender free antivirus 2019
Please recommend the best AV according to you.
Could you make a review for Avira? It is a popular antivirus here in Brazil. Thanks.
Yeah. It’s on my list.
Can you test Cisco AMP for Endpoints. It should be one of the best.
Do another IoBit Advanced SystemCare! I wonder how good it is this year
Could you pls test eset with the new version ?
how safe is it to go on a live hunt for malware on a vm ??
Currently a new malware. Msop has been in the internet. I would like to know it's details and how much time it is active after its first mark. Please it's really important for me. My pc has been infected by this malware and I don't know what to do
Curious if any malware tested has ever broken through your VM encapsulation and infected your host system before
I can't remember which one it was but that has happened.
CAN YOU DO A REVIEWS About which is the best ANTISPYWARE-only program (Super Antispyware etc) ? PLEASE :)
Sir can you test eset nod32 .. I am currently using it.
Can you test the new version of gdata?
why you not included expressvpn in your top vpn choice in your website
are they interested in moving into personal computers ?
I'm going to be working with SentinelOne soon, and I'm going to put Cylance Enterprise up against Sentinel One Enterprise. I know that you tested the home version of Cylance with poor results. However, the home version is scaled down. If you have access to the console, you can tweak the strictness of detection as well. Also, I tested Cylance enterprise against Malwarebytes and Kaskpersky on an individual bases and then in conjunction. Cylance killed them working simultaneously on the same machine, both on pre-execution, detection and false positives. I want to note: although it's true, you can put strictness with most products and it will block everything from executing, I don't do my tests that way. I usually do 3-4 different tests. One is out of the box, with no config. 2nd is with some config, 3rd more config, 4 maximum config. Cylance still beat Malwarebytes and Kaspersky together. I would also like to stipulate that I had Kaspersky and Malware bytes on all my clients before performing this test. I was in possession of Malwarebytes life-time license and have been using it for a freakishly long time. I still recommend using Malwarebytes and Kaspersky in conjunction for those people who can't afford enterprise class anti-malware. Both of them in conjunction are still the next best thing imho. It should be interesting to see both enterprise products head to head. I can't wait to get started. PS: While we are on the topic of Enterprise class antimalware, Windows Defender Enterprise class anti-malware although barely discussed is also excellent, and much better than the regular Windows Defender that comes with Windows.
Hi leo, can do test on ClamAV?
When I was in this business Spyhunter was one of the best programs. But I don't see any test here ?
Hitmanpro was a little kid compared to that. Thing changed ?
Let the "malex" script log which executables have been run so it can resume its task at the point where it was killed.
Interesting
This is one of the BEST Endpoint solutions out there. I have tested and evaluated most of the Vendors myself. Also, i do not agree with the false positives bit of the videos. In my configuration, we were able to run legit applications such as O365, Putty many other day to day apps. 10/10 from me, however the cost of this product is bit not competitive. Also, you did not test the Detect mode, enabling ransomware infection on your test computer, and using the Rollback feature. This is key to every production environment, very little vendors support this. Just my suggestion :)
What about Crowdstrike Falcon? Have you been testing the product as well?Just curious which of them i should go for...
Thank you :)
Ditto here. S1 is by far the best bang for your buck! Crowstrike is very similar but more expensive.
How would you rate this against CylanceOptics and Crowdstrike?
Test Smadav vs Ransomware
Did you see the clock?
I'd love to see a video showing How Linux react to some malware, Linux made malwares and also windows malware through wine, that could be fun to watch!
Krafting rm -rf ~/.wine/drive_c bam malware removed
Which is the best free antivirus program right now? avast?
which programs should we have to protect from viruses? malwarebytes?
please come back and review in 2023!
Can I get an update video on WebRoot?
Nice wallpaper! I guess I should stick to Sophos home free and Comoros free lol
Comoros
Hey Leo, would you mind sharing the malware samples you are using to test the products? Thanks
Can you do a video on how to secure pc for average user using only free softwares
Only real stupid ppl woukd watch it
Can you make another bitdefender free vs kaspersky free video?
Please would you do a review of the anti-virus/malware product called SpyHunter 5. I have just left them and decided to try Malwarebytes anti-malware as a replacement, but following your recent review of Malwarebytes, I'm wondering if I've made an error of judgement. Thanks.
👎👎
is this considered an anti virus software or something like malwarebytes?
Review on Avast Premium Security please
Please do a video about SMADAV vs virus or malware
So after all of these comparisons...... Whats the best overall paid AV in your opinion?
go to his site and see for yourself
@@raffeisen2085 thanks...... Was looking to buy an AV.
Its kaspersky trust me
@@zardian can't go wrong with kaspersky or bitdefender
Shivam agree, both are very good in my experience
Can you redo the test with eset? its almost a year later now.
Yes. It’s on my list
Please test Sophos and Avira
It blocks everything because you set policy for suspicious activity to protect. That is using the product in wrong way. You should set it to alert to get baseline of your system and whitelist genuine processes before changing to protect.
Do Kasperski do problems with games?
As a kaspersky user,i never witnessed any problem while playing games... Sincerely
Free AV showdown
Out of all the security software that you have tested, which one is the best in your opinion?
Mmmmmm, you mention that HitmanPro was terminated - I downloaded this a couple of days ago (trial version) then I deleted it after a scan to the point that searches in File Explorer could not find it. And low and behold a day later, I got an notification in 10 that it was doing a scan - mmmmmm - Thanks
Hey could you please do a review of McAfee antivirus. Please.
U should do a webroot secure any were review
That went well... Hahah
@@zehphwell that's why I wanted it testex
Can I download malex?
Try testing deep freeze by faronics
Can you make a video about idle Buddy
please test malware analysis sandboxes
Test Windows defender 2019 november please
Carbon Black Defense please.
Could you please test Panda Dome Advanced