Is there a way to force CIS to show a popup before deciding to sandbox an application with the HIPS disabled?
It’s a pain to have to close the app, manually allow it and launch it again, while this could be solve with a simple popup allow/block/sandbox
I have the HIPS disabled and the proactive profile active
By default CIS asks the user what to do when a unknown program is trying gain admin privileges, in the containment settings you will see a setting for not showing privilege escalation alerts, which is unticked by default.
For unknown apps, you can force one of those alerts by right clicking and running as admin.
I don’t think there is any other way to do this, after all it is “auto-containment.” Although Comodo can change the name to just “containment,” and add an option to “Do NOT show containment alerts.”