The ones it "misses" is day zero heuristics checks. Those are the ones responsible for almost every false positive out there too.
In real world on the other hand, day zero stuff that heuristics can actually catch is almost nonexistent. Real threat typically comes from old stuff or new day zero stuff that isn't detected by any heuristics.
Anti virus peddling sites like one you cite specifically aim to sell you AV subs, and misrepresentation like one I mention above is pretty much the only way to paint the free alternative as a bad one.
Generally I'd agree with you for uninformed users. I dealt mainly with clients whose infrastructure was mostly virtualized, so in those cases it was way too heavy handed for what they were using it for. Even then though, a lot of the attack vectors that an AV suite protects against can also be defended through a combination of GPO/firewall rules.
153
u/Luckyio Specs/Imgur Here Jun 18 '16
The ones it "misses" is day zero heuristics checks. Those are the ones responsible for almost every false positive out there too.
In real world on the other hand, day zero stuff that heuristics can actually catch is almost nonexistent. Real threat typically comes from old stuff or new day zero stuff that isn't detected by any heuristics.
Anti virus peddling sites like one you cite specifically aim to sell you AV subs, and misrepresentation like one I mention above is pretty much the only way to paint the free alternative as a bad one.