CoreForce: part 4 (forum)

the guys at CoreForce run a forum. Here is the link
otherwise as mentioned before, you can always mail the dev team
at support@force.coresecurity.com
(make sure you read the FAQ , user's manual and help file, or post a question in the forum before you do that)
I'll leave it there for now with my posts about CoreForce, Please leave your comments if you have any. Thanks.

p.s. one last thing: Coreforce seems to be able to run unsafe programs (?) in sandboxes, which I suppose means in a secure environment for the PC. Have not tried it yet...

CoreForce : part 3

I have now reinstalled CoreForce, so far so good. Got a few alerts, forgot to take some screenshots (lol). I'll do that next time I've got one. I probably made a mistake when switching one program from it's rule to trusted programs. Well the whole purpose of CoreForce seems to consist in establishing those rules, so getting rid of them just does not make sens. Shame on me one more time (lol).More as it comes...
Had some issues with connecting to gmail via thunderbird, went to the setup wizard from CoreForce UI to reconfigure the ports (for some reason I had not been prompted to do it at installation time..hmm.. because Coreforce kept some tracks from my first install,when I did not want to configure this first).
New issue, cannot get Windows Live Messenger running while CoreForce is activated. I get an error message from MSN telling me that some entries in the host file were modified; been ask if I wanted the wizard to clean these entries, answered yes, but it still doesn't work. I had to deactivate CoreForce to get MSN messenger running again. There's probably something about the profile of Messenger in CoreForce to change that I haven't found yet. Yes as you notice, applications have more than rules in CoreForce, they have a profile integrating much more parameters than the usual firewall rules. More on it as it comes...

CoreForce: part 2

CoreForce definitely runs at kernel level, monitoring registry entries and the file system access by the operating system and applications. So it's definitely a HIPS. It's firewall component also works at kernel level, with a driver interacting between your network card drivers and windows tcp/ip .
I strongly advise to uninstall any other HIPS program that you might have on your system, BEFORE you install and run Coreforce. I think the problems I got yesterday came from conflicts between Coreforce and Spyware Terminator. I will now totally deactivate ST and run CoreForce install again. More on it as it comes...

p.s.: shame on me, I just noticed in the GUI that CoreForce defines itself as a HIPS (lol).

Coreforce

thanks for posting Alg. I won't install cpf again, at least not before version 3.0. I found the link to Coreforce really interesting. The software looks extremely sophisticated, but not that easy to handle. I downloaded it yesterday, and when I rebooted, I started to get quite a few problems. System freezing shortly again and again, but no crash. Just the alerts reacted too slowly to my clicks. I had to uninstall to get my system work normally again, but I will reinstall, after I've read the user's manual carefully. The software seems to be a high-end mixture of a firewall and a HIPS,even if at the moment, I'm not even sure it can be called a HIPS; it reminds me a bit of System Safety Monitor (which I use); the big difference is that Coreforce is also a firewall, and from the type of alerts that I've noticed, a very efficient one. Also Coreforce works with profiles, with one profile dedicated to each application known from Coreforce; these profiles can be updated; I suppose that's why they call it a community software: the updates seem to come from other user's optimized config. Sounds like very, very new stuff.I said yesterday to someone that in compare, cpf looks like a toy for babies. I'm just a bit worried about this windows drivers warning during installation. Hope it doesn't matter.They're just not listed and tested by Microsoft. OK, for those who'd be interested, here is the link again. Just be advised, this program is really not for everyone.See here first for the pdf user's guide.Good luck !

more on this program later in this blog...

p.s.: CoreForce is still a beta. Consider watching the FAQ on their web site; there's also this address for support: support@force.coresecurity.com

SSM screenshots (click to enlarge)

System Safety Monitor

Hi all,

today I'd like to post here a couple of screen shots of System Safety Monitor. Here is the main window showing the process monitor tab; the other window (on the same picture shows a typical ssm alert).
The second shot shows an other kind of alert, definitely HIPS related, the kind of thing that Spyware Terminator's integrated HIPS "forgets" to do, when for instance a program was uninstalled and replaced by a new version.
Now the alert on the third shot tells that some files signatures have changed
in your system.4th shot tells you that some apps run without rules, these appear highlighted in blue in the application monitor. That's impressive. An this is just the freeware version.

here as a reminder: http://syssafety.com/
screen shots will follow as soon as ready to be published