"You're getting outdone by Norton" I lost my shit 🤣

I genuinely appreciate your effort. You deserve your place in the "malware & security" community.

Amazing! It was only yesterday or the day before that I searched your channel for a Cylance test. Thanks for doing this!

Thanks for this test, was looking forward to it! ^^

You should do this test again, cylance was in its infancy when this was first done and has changed a lot since then. You should see if it takes care of these threats now and see if you like the new interface

It missed the worst virus of all: The dreaded "Windows Update" virus!

Thank you for this test so much. I was about to buy it and test it for myself, the software is much more expensive than a regular AV.

Great demonstration of pragmatism to testing. Very interesting as you went and clicked on pages and software trying to install. Kudos, keep it up! Cheers.

Hey leo...love ur video....btw u haven't made any video about 2019 avira, McAfee,k7 ...still waiting for ur review on those products...also make a separate video about new banking Trickbot trojan which disable windows 10 defender....also keep making video we love u and ur channel...pls keep us updated.. thank you

Thats quite a good test, I kinda found your channel because I saw a Kaspersky test, I was talking to somebody about what AV was a good option for them, and I mentioned that I really liked Kaspersky back in the days that I used it, they are much more expensive then other cheap AV, but I knew they were semi good...and I'm glad that even after all those years of not having used an AV my old experience still holds true, I'll definitely recommend that video for them as to why they shouldn't cheap out on an AV if they are going to pay for it. also 13:54 (nervously laughs in gigabit internet) yeah it's really nice, but the scary part of having it is if you ever need to move that is not a fun idea. or just use non gigabit internet for your "regular stuff" that you do... "oh there we go it's not respon... oh wait no you're not on gigabit fiber :)" The worst part is not just the speed, I mean you can do a lot with a petty 200-300mbps, but the ping can really make it look so much worst then it is. there's a big difference between 100mbps cable vs 100mbps fiber. You get the same feeling when you use a super slow computer: hold on I clicked on that icon 0.1µs ago, is your $100 machine broken or heavily infected? what's that? HDD? no never heard of that Software, neither have I heard about company "dude it's a dual core CPU just wait" ;) And that was my superiority complex rant :D

What AV recommends based on your experiences? With CyYlance it would be necessary to see what type of configuration the console had, or were you in the most restrictive? Regards.

Good video. One thing to keep in mind is that the Cylance agent installed as you have will have a default config. After your install, your machine name would show up in a portal where you can have policies applied to you. There are a bunch of memory and other lockdown settings which would have completely stopped 99.999% of what you have tested. Try another test if you can with a full lockdown of the highest security settings.

I administer Cylance PROTECT at my company and while this is a great video, it is only showing the product from the end-user perspective with very limited information. There is a whole other side with an admin control panel that you can sign into to view more detailed threat information. Cylance also allows you to configure device protection policies which includes options for enabling file actions, memory protection, application control, script control, device control, etc - and we don't know how any of that is configured in this experiment. Basically there are a number of sections with a range of options, so depending on how the policy is configured on the back end will greatly affect how effective Cylance is at catching and responding to the various threat types.

Cylance does have an advanced UI you can enabled by using command prompt. I can log in and view every file that has been blocked. I thankful for your review and this does help me out.

Hi! I haven't watched any of your videos recently due to my GCSEs, but you sound a whole lot different! Keep up the good work :)

when norton detect something that you miss and is not false positive, you know you are in big problem.

As a Cylance Admin user at work, I also do not like a lot about the product. In it's defense though, you would have to look at the online console to see what has been turned on. the product (at least our version at work) is highly customizable and does not have all of the features turned on as default. For instance, Memory blocking/alerting and Script blocking/alerting have to be turned on. Also, your version might not be the most current as they release updates almost monthly and auto update is also not defaulted.

Great reviews!

The simplicity is designed to keep clients from screwing with it. But here is how you get better UI. If you need to do advanced troubleshooting or run a scan on a system 1. Disable/Exit the Agent UI Windows: Right-click the Agent icon (system tray), then select Exit. 2. Open the command prompt, then do the following: Windows: Enter: "C:\Program Files\Cylance\Desktop\CylanceUI.exe" -a

Could you make a video with your recommendations for the best antimalware programs to run together for the best protection?

I love longer videos, make more of them

Best video ever. Subscribed!

Great video.

Love your vids man thank you

We've use this at my organization, and honestly I've seen WAY WAY WAY WAY more false flags, lots of blocking normal every day stuff that shouldn't have any heuristics of a virus. Honestly in practice I feel like every other AV was more effective.

Great videos!

Have you done this with Emsisoft 2019 ?

I'm shocked I recommended this about a month ago and here it is lol, this was honestly just in the news (security related news) apparently the software looks for certain stings and if it find them it auto whitelists the software. Some researchers where able to find a string used from a video game (which caused it to be auto white listed and edited the same code into a few types of malware and sure enough Cylance white listed the malware lol. For context, all the malware samples that where whitelisted by Cylance where flagged as malware before the addition of the string used to whitelist a video games anti-cheat.

TYVM Leo ;-)

i like this kinda content imma subscrib

Hey buddy, where can I find the wallpaper? Greets

Thank you very much sir

Hey Leo, I've noticed there is now a "For Home" version. Do you think to test it as well?

thank you so much

i have the same host config. Would you tell me why you'd go for a laptop and not a desktop though?

please try to test that as a home option towards malware and security as an option for laptops that need protection from virus, trojans, malware. if windows could do this on the Enterprise level it would solve HiD attacks as well!

these AI based AV solutions have so much to learn, also why havent they utilized existing white/black lists or allow them to be updated by current AV definitions and allow the AI to bolster that, and if they do do this then they have implemented it incorrectly. Seems that a lot of things made these days are either not built to last or made by someone who thinks they have completed their work but still have a ways to go

Hitman Pro is i belive best malware killer from all of them

what would you say was the lightest antimalware product you have tested on the cpu? (on a side note how do i stop system interrupts from hogging the cpu, ive tried updating the drivers and disabling recommended things like wake on magic packet)

How much protection does running the system in a user account give? Does any serious amount of malware escalate itself to admin privileges without needing your admin password to install? I know you don’t think much of whitelisting, but I like the idea of being warned when something is trying to install itself when I never intended to install something, that would at least block malware from malicious links in emails or clicking in malicious ads on websites?

Cylance does use signatures and behavior blocking this not only AI.

is there nay issues when you run 3 AV at once, wouldent they counter eachother by any chance? (malwarebytes, hitman pro, norton?)

If you want to reboot Windows and not install updates, you could use shutdown -r -f -t 0 command.

*A couple pages trying to load* Not even concerned that it’s an ip logger He probably has a vpn on though ( 4:14 )

good test. remember that with cylance, being AI, it is looking for triggers, so some of those failures to detect will later be picked up as those processes/exes try something it deems unusual. it might have been interesting to leave your system running for a day to see if they are picked up.

So, what AV you recommend?

For your SOS is there a reason you don't have MB suggested on your website?

Getting outdone by Norton!! ROFL ... I almost felt the burn

Hi Leo, These cloud base AV's don't convince me this reminds me of Webroot or Panda. They're light but not as effective AV products Kasperksy, Bitdefender or Avast/ Avg which have a better behavior component.

would still love to see this test run on ZoneAlarm Free Antivirus and Firewall non next gen

Make an updated review please. They seem to be the first to do an ad campaign targeting Kaspersky customers

It's probably not the greatest AV out there, but I personally use it because it is very lightweight (lighter than Windows Defender it seems) which honestly helps quite a bit on my laptop with only 8gb of RAM

Great test. I would however like to se what settings is turned on. And you are missing some tabs in our UI. What version are you running? Oh, btw. Cylance does everything localy, no cloud compunting. The AV can run in 100% offline mode.

Leo, could you tell me how likely it is, that Process Hacker installed could be utilised by a virus or so to get access to my system? I love that tool, but Sophos Pro also blocks it and I created an exception to have it on my system. That said, Sophos Pro didn't block any other system tool ever since I use Sophos. So, overall I think Sophos does a very good job in determine where it should interrupt.

I wanted to see the Malwarebytes results man

Can you test Cisco's AMP for Enpoint as it claim to do also NG-AV but with aditional SHA based file detection? Thanks for the good stuff.

I find it good, that you test a lot of antivirus software! Because you should choose wich antivirus is good enough for yourself and you help for that! But we must ever think of that, that every scanner has his disadvantages!

Can you please do a new review for Avast Antivirus?

As a person who grew up with pc technicians I understand your Language.

Someone posted that Cylance was currently running a special and that this was a good AV. I googled reviews on it. I then came to a reddit thread saying sad Cylance. So I went to the KZfaq link posted. It sent me to this video. This video is very well done and I have since watched others you have done. I subscribed because of this. Keep up the good work.

Really nice test! Trend micro test please 🙃🙃 have a nice day

What would be your opinion on Vivaldi web browser and also what you be your preferred browser extensions?

Can you do this experiment using Cylance Protect? You will see the difference if you do the test with Protect.

This is the best free software Ive seen. Respect.

Hi there Leo, would it be possible to do a test with the same methodology (including the GG AI false positive) for purely the behavioural components of other more "traditional" AVs? For example to retest Kaspersky's System Watcher (with System Watcher being the only active component and Kaspersky Security Network being disabled). Or Bitdefender's Active Threat Control (with the cloud and everything else being disabled). Or your (probable) favourite - Emsisoft's Behaviour Blocker (without cloud lookup). Or even Comodo's VirusScope if you're feeling fancy... :p This could turn into a cool miniseries, don't you think?

(9:26) Pause and look at the background kinda looks like gru off minions.

Your test may be quick n easy, but it does not simulate real world use of anti-malware. A Proper AV test: Step 1 - Install all windows updated, reboot Step 2 - Install AV, reboot Step 3 - If initial scan is occurring (which Cylance does), let it finish initial scan Step 4 - NOW try your malware test Anyone who installs ANY anti-malware program and immediately starts surfing/downloading/installing is asking for it, especially without a reboot allowing the service to start in its normal operation mode.

our school gives this to us for free so I wanted to check it out

Any updated tests for cylance?

Why your Malwarebytes is not latest version?

Concerning Malwarebytes, I think you can tell it NOT to identify your fav programs as malware! I think i saw this in their programs instructions or settings?

i thankx for the test i appreciate so.. would u test cylance protect endpoint for us?

On the Mac would the out come be the same??

Is the a video series like this for Linux based anti virus?

You running on a laptop or something? That fan noise bro! If you need me to build you a completely silent PC lemme know :)

If you don't have internet how do you even go into the dashboard...

Just when I thought Norton only finds cookies and packages Sure am happy that Malwarebytes antimalware is protecting me

What is the best enterprise application in this field?

On the false positive test, you should have disabled the MBAM trial real-time protection but the nasties cylance let through makes me nervous.

Cylance looks only at PE files to stem the attack, not tasks/registry settings or anything post attack.

Just simply put the code, it works! thanks!

please can u try new eset internet security?

god bless ur heart

care to test Carbon Black which is now owned by VMware ?

what av are you using

can you test trend micro antivirus

We run Palo Alto Traps! Reach out to me I could give you an install for you to test this against your lab files be interested to see how it performs. Let me know Darren

if privacy and security is an issue i think windows should impliment this into the kernel and os which will then further protect enterprise netverks...lol the netverks will be safer and furthermore on their server oses as well! and i've witness hacked routers also where options has been hidden in the webbased setup!

The product is installed but you don't know if it's fully functional plus Cylance doesn't work on cloud and you could even disconnect your network adapter on your test machine.

I was using it for more than a year. It worked fine, but I was forced to stop using it because of lack of customization. It is no not possible to turn it off temporarily in any way and it is not possible to set any ignore directory. For example I have an old Delphi project, I need to use old Delphi IDE, every exe file compiled by this IDE is suspicious for Cylance and denies to start it. It seems Cylance is designed to be managed remotelly by IT department where all employees must follow strict rules. There are very few options how to customize it by end user.

You need to have access to the console to configure the antivirus.

Please do whatever you can to get my computer safe and running good again

Where can i support you

Please test Trend Micro next?

Blackberry needs to make their antivirus durable, competent, not to mention shatter-proof and not just their phones.

What would be cool is if you cold called a scammer with your VM loaded with malware!

Please test Bitdefender 2020 next?

How does Cylance compare to Kaspersky Total Security? P.S. Don't MULTIPLE ant-virus programs at the same time - CONFLICT?

It looks like you have been given an MSP version, which is why there is no configuration and it seems very simple.

intel management systems in bios should be remved its all access to the system that can be exploited