The Advanced Threat Scan Engine (ATSE) uses a
combination of pattern-based scanning and heuristic scanning to detect document exploits
and other
threats used in targeted attacks.
Major features include:
-
Detection of zero-day threats
-
Detection of embedded exploit code
-
Detection rules for known vulnerabilities
-
Enhanced parsers for handling file deformities
ImportantBecause ATSE identifies both known and unknown advanced threats, enabling ATSE may
increase the
possibility of legitimate files being flagged as malicious. Trend Micro
recommends sending detected files to a controlled virtual environment for further
observation and
analysis.
|