Does KIS protect against fileless attacks?

[Timur Born]

Does the (consumer software) KIS protect against fileless attacks or do only enterprise products do so?

[nexon]

Do you mean network attack for example?

[Timur Born]

https://www.kaspersky.com/enterprise-security/wiki-section/products/fileless-threats-protection

[Wesly.Zhang]

Hello, @Timur Born 

I think you have get the point, right?

System watcher and AMSI protection function has this similar type protection.

Regards

[Timur Born]

Sorry, but no, I still don’t know if fileless protection (Powershell, WMI, etc.) is part of the Kaspersky consumer products? The Kaspersky Wiki entry I linked to is specifically meant for Enterprise products.

 

For example, with xxxxxxxxx you only get this kind of protection for their higher tier enterprise products (it’s even not included in the lowest tier enterprise products) and their consumer products don’t even mention it.

 

Same with xxxxxxxxxx, fileless protection is specifically listed for its Enterprise Defender, but not for its consumer (free) one.

[harlan4096]

https://www.av-comparatives.org/wp-content/uploads/2019/12/avc_erw_2019_consumer_en.pdf

 

Home products don’t have an specific external module to manage/setup fileless attacks, but are integrated inside MSI/SW as @Wesly.Zhang already commented...

[Timur Born]

@harlan4096 Thanks for the link, it’s well appreciated!

[Timur Born]

Here is a more recent test done by AV-Comparatives:

https://www.av-comparatives.org/tests/enhanced-real-world-test-2020-consumer/