CrowdStrike: all settings were enabled and set to maximum.

Please note that for products which have high protection settings by default, or do not allow the relevant settings to be changed, we left the configuration at its default values. The following settings were applied to the products. In version 2.x, the cloud validation policy concept was improved. In version 1.8.4, the default policy used to require cloud connectivity for mitigation. For existing customers, version 1.8.4 (as used for this test) was the latest available version in the console at time of testing (November). SentinelOne provided version 2.0 to new customers already in September 2017, but did not force a console upgrade to existing customers.

Symantec Endpoint Protection Standard 14.0.

Sophos Central Endpoint Advanced Protection and Intercept X 11.5.9-3.6.10.

Kaspersky Endpoint Security for Business 10.3.

Bitdefender Endpoint Security Elite 6.2.

The following up-to-date licensed product versions were tested:

Real-World Protection Test, including False Alarm TestĪll products were purchased from distributors, except for the Bitdefender product, which was provided by the vendor itself.

PowerShell-based File-less Attacks and File-based Exploits Test, including False Alarm Test.

Proactive Protection Test, including False Alarm Test.

The primary goal was to compare the automatic prevention and detection capabilities of different endpoint protection solutions. The tests were performed in November 2017 – January 2018. Bitdefender GravityZone Elite Security was tested against competitor endpoint products selected by Bitdefender. Bitdefender commissioned AV-Comparatives to perform an advanced Endpoint Protection Test.

Media autorun is enabled bitdefender