ReHIPS forum

English Subforum => ReHIPS => Topic started by: shmu26 on September 03, 2016, 10:53:24 PM

Title: what are parameters of "inspect children"?
Post by: shmu26 on September 03, 2016, 10:53:24 PM
when "inspect children" is enabled, what kind of things will be blocked, or trigger an alert?
does it inspect for vulnerable windows processes, or unknown exe files in suspicious locations, or...?
Title: Re: what are parameters of "inspect children"?
Post by: aDVll on September 03, 2016, 10:55:53 PM
Can execute programs
Select a parenting mode for this program.
Alert - "Allow program to execute other programs?" window will be displayed when this program tries to start other program;
Block - this program will be disabled to start other programs;
Inspect children - if a child program is not in ReHIPS database, "Allow program?" window is shown otherwise ReHIPS database settings for child program are applied;
Allow - allows a current program to be an unlimited parent, child programs will be started with privileges of a parent one without notifications.