I add a application to my blocked file, it cant run but the sandbox still popup told me the application had sandboxed when I try to run the application.
I think that the sandbox need not to popup when a blocked application want to run because it totally could not run.
Agree , beside if the program is trying to do a BO attack , it will be sandboxed in some cases , I thought the BO test comes before the sandboxing procedure so it checks the file for viruses and then for BO if any not found , then it will sandbox it ???
That doesn’t sound right. It sounds like a bug to me. What version of CIS are you using?
the lastest Version.
Do you see the blocked application in Taks Manager after you got the sandbox alert?