what are parameters of "inspect children"?

Started by shmu26, September 03, 2016, 10:53:24 PM

Previous topic - Next topic

shmu26

when "inspect children" is enabled, what kind of things will be blocked, or trigger an alert?
does it inspect for vulnerable windows processes, or unknown exe files in suspicious locations, or...?

aDVll

Can execute programs
Select a parenting mode for this program.
Alert - "Allow program to execute other programs?" window will be displayed when this program tries to start other program;
Block - this program will be disabled to start other programs;
Inspect children - if a child program is not in ReHIPS database, "Allow program?" window is shown otherwise ReHIPS database settings for child program are applied;
Allow - allows a current program to be an unlimited parent, child programs will be started with privileges of a parent one without notifications.