when disable antivirus and containment file rating don’t block and terminate malwares files in cis 18.104.22.16850 beta 2
file rating don't block and terminate
i think file rating is only here for recognizing malicious things
there are hips / auto containment and viruscope for blocking them
file rating work in final version cis 22.214.171.12414 good (block and terminate malware files)
not in beta version
Hello walid assem,
Thank you for reporting.We will check this.
Have a nice day.
thank you for responding
It works for some detected malware but not others when I tried. And it also depends on what HIPS rule you have set for windows explorer in regards to run an executable access right.
it must work like cloud antivirus when detect the malicious file create rule for it that block it from run and quarantine it