ReHIPS 2.4.0

ReHIPS

ReHIPS is an innovative Host-based Intrusion Prevention System (HIPS) that protects your computer from malware and doesn't require frequent updates.

Windows meets the requirements of C2-level security of the U.S. Department of Defense, it already has all the necessary mechanisms to provide access control. ReHIPS takes advantage of these built-in mechanisms and operates in a restrictive manner (if it is not explicitly allowed, block it). It executes every restricted application in the isolated environment (ReHIPS mode) with its own set of rights. Even if this application is compromised, your operating system stays protected and secure.

ReHIPS doesn't detect malware. Instead it uses Windows built-in access control mechanisms to ensure system safety and data security. Thus ReHIPS is always actual and doesn't require frequent updates. Unlike some other sandboxes ReHIPS doesn't use kernel-mode hooks, splicing and other unsafe rootkit-techniques. It is based on documented Windows security mechanisms ensuring system stability. ReHIPS provides reliable protection and compatibility with actual Windows versions.

ReHIPS 2.4.0 changelog:

implemented fine-grained children processes filtering;
process and wildcard are combined;
process exit code added to the log;
fixed bug with multiple trusted users;
added mitigations and reduced privileges;
isolated desktops close buttons are slightly changed;
fixed screenshots of isolated desktops;
mirrored windows can be minimized;
click on active tab minimizes the window;
agent is registered as shell and taskbar;
minimized windows are moved outside of desktop;
no alerts are shown in permission mode;
files and folders permissions can be reset after reboot;
wildcarded rules can be skipped if no matching program is found;
fixed network filtering on service unexpected crash;
new and existing RulesManager rules are merged;
missing rules are installed even for bound programs;
process file handle is cached;
parent process name is correct even after rename;
files copy to user profile folder for Open File Access are autosaved now;
on Service restart and external database change critical files permissions are reset;
fixed foreground window detection (it can be invisible);
fixed long timeouts during multiple connections to Service;
added isolated processes elevation block option;
implemented process network filtering;
added clock to isolated desktops taskbar;
added basic support for tray notification icons on isolated desktops;
Agent fonts changed to standard;
installer checks whether an older version is being installed;
first start window fixed and improved;
first start window size is automatically calculated;
added several programs and trusted command lines/vendors to RulesManager;
some other small fixes and improvements (check for executable file, fixed bug with trust for non-executable files, first run window shadow overlaps all windows, etc.).