This message was deleted.

Maybe @Martin Zugec can help? :)

I might be able to 😄 Best approach? Use the malware strains that were used during these famous ransomware attacks (Colonial, JBS...) and test them with HVI. Another approach I like to use - find a zero-day attack and show the value of HVI by blocking it. For example we've recorded a demo where HVI stops WannaCry - but we did it few days before the actual attack happened (using EternalBlue exploit, since we predicted it will be weaponized soon).

Thanks Martin, I was looking for test examples. I can see launching an old copy of Chrome or Firefox, and it gets blocked. So its certainly working... Incident Type: Invalid Memory Access Description: An attempt to access a memory area in a way that conflicts with its designation (writing in a read-only area (e.g. kernel code memory page) or to execute code from a non-executable area such as the heap or stack of a process) Details: User Mode Attack Access Memory Type: Violation Type: IG_EPT_HOOK_WRITE Attack Source: firefox.exe library loaded by process firefox.exe (PID: 7124) Attack Target: User mode library Action Taken: Shutdown