Industry-leading technology from ESET

We perform deep analysis of the code and extract “genes” that are responsible for its behavior. We use these to construct ESET DNA detections, which are used to assess potentially suspect code, whether found on the disk or in the running process memory.

DNA detections can identify specific known malware samples, new variants of a known malware family or even previously unseen or unknown malware that contains genes that indicating malicious behavior.

To offer the best detection rates and the lowest possible false positive rates, Advanced Machine Learning utilizes outputs of both static and dynamic analysis. It is also fine-tuned to coordinate with ESET’s other technologies such as behavioral analysis, DNA detections, sandboxing and advanced memory scanning.

Applying URL allowlists and checking reputation prevents users from accessing sites with malicious content and/or phishing sites.

Deep Behavioral Inspection (DBI) is one of HIPS’ built-in modules that enables deeper and more granular user-mode monitoring of unknown and suspicious processes. DBI was introduced in 2019 and represents an effective antidote for evasion techniques known to be used by threat actors in the wild.

We use binary translation to keep the in-product sandboxing lightweight and avoid slowing down the machine. We first implemented this technology in our solutions in 1995 and have been improving it ever since.

Whenever a process makes a system call from a new executable page, Advanced Memory Scanner performs a behavioral code analysis using ESET DNA Detections. Thanks to implementation of smart caching, Advanced Memory Scanner doesn't cause any noticeable deterioration in processing speeds.

Moreover, there is a new trend in advanced malware: some malicious code now operates "in-memory only", without needing persistent components in the file system (in other words fileless malware) that can be detected conventionally. Only memory scanning can successfully discover such malicious attacks and ESET is ready for this new trend with its Advanced Memory Scanner.

Exploit Blocker monitors typically exploitable applications (browsers, document readers, email clients, Flash, Java, and more) and instead of just aiming at particular CVE identifiers it focuses on exploitation techniques. When triggered, the behavior of the process is analyzed and, if it is considered suspicious, the threat may be blocked immediately on the machine.

This technology is regularly updated as new methods of detection are added to cover the latest exploitation techniques.

The technology is activated by default. If ESET Ransomware Shield is triggered by a suspicious action, then the user will be prompted to approve/deny a blocking action. This feature is fine-tuned to offer the highest possible level of ransomware protection together with other ESET technologies including Cloud Malware Protection System, Network Attack Protection and DNA Detections.

To increase network level protection offered by ESET products our experts developed Botnet Protection. This technology has been specifically designed to identify malicious communication and processes associated with botnets – vast networks of attacker-controlled infected devices, typically used for DDoS attacks, distribution of malware and sending unsolicited emails.

Connected Home provides users with a user-friendly "sonar" view of connected devices, showing printers, routers, mobile devices, game consoles, IoT gadgets and other devices connected to their Wi-Fi networks. The provided overview includes the IP address, MAC address, name, model, and vendor of each scanned appliance.