Public Documentation
Public Documentation
The tLab system is a corporate local service for the remote and secure analysis of suspicious objects. The system is designed to protect against new types of cyber threats against which typical antivirus software is ineffective: targeted attacks, "zero-day" malware, and user-directed attacks.
tLab performs autonomous analysis of program behavior and detection of malicious functionality on the server (corporate cloud). The system allows automating the procedure for analyzing the behavior of any programs and detecting signs of malicious functions within them.
Suspicious objects are run in virtual containers, where continuous analysis of the behavior of all running programs is conducted.
For reliable detection of malicious objects, including "zero-day" threats, a unique technology for deep analysis of program functionality is used.
This technology has an innovative aspect, which includes a mechanism for recognizing specified malicious functionality. It tracks the history of behavior and correlates the events of various processes in real time.