16place
VoodooShield 4.6.8 All the ideas and discussions
0 votes Vote

I would like to request a feature based on applica

I would like to request a feature based on application whitelist first run. I like the idea of advanced snapshot feature.

I wonder if the developer would consider a feature like Voodooshield Simulation (Voodoo-Sim in short) where the user will be able to trial run an executable inside a virtual sandbox/VM environment. This will be possible with adding "Allow one time" execution option, the executable will be run in a VM/sandbox like & possible effect+changes on the system will be listed & shown to user to decide, alongside the scan results. Information like what part of system it is affecting, if sending request to remote servers or trying to connect to & request additional data via specific IP/port connection etc. Ideally I would like to see VS using one pre-saved snapshot for this simulation execution to set an idea of what an unknown executable can do to a specific system.

Of course it will only run this trial Voodoo-Sim for small executable files, less than a certain size like 2-5MB depending on needs. This will help with specially the small processes that are run with the startup & if some small executable I'm willing to try out once without needing a separate VM installed environment. The Voodoo-Sim mode can do that work for me. Therefore an allow & monitor option can be triggered after first simulation run & Voodoo-AI will start marking the score.

Another option I would really like is allowing whitelist entry editing option. For this I won't have to whitelist a same executed program path several times every time it is run. I think command line entries can be edited & so should be the whitelist. Then for running again at later point with help of whitelist it can match every aspects like the exe path, type & other attribute before auto allowing.

Thanks to the developer for this wonderful robust product. Very novel approach

Richard Kettleborough , 01.12.2018, 04:01
Idea status: under consideration

Comments

Leave a comment