CIS perform cloud based behavior analysis of unrecognized files. So provide something to users to see that process in CIS user interface. For example “waiting for the cloud analysis of video.avi.exe”.
some times it fails to perform cloud based analysis due to poor internet problems like in dialup or low speeds, so provide button to select file and click “cloud analysis”.
All advanced users, sorry CIS users = advanced users, will be happy especially for malware hunters and add \Device\KsecDD to protected files and folders as default.
