Kernel Pack

Kernel Pack

Exploit Pack
+
+

Related Products

  • ManageEngine Endpoint Central
    3,347 Ratings
    Visit Website
  • Iru
    1,389 Ratings
    Visit Website
  • ESET PROTECT Advanced
    2,332 Ratings
    Visit Website
  • Safetica
    416 Ratings
    Visit Website
  • Kitecyber
    87 Ratings
    Visit Website
  • Admin By Request Endpoint Privilege Management
    107 Ratings
    Visit Website
  • Bitdefender Ultimate Small Business Security
    5 Ratings
    Visit Website
  • ThreatLocker
    705 Ratings
    Visit Website
  • iVerify
    1 Rating
    Visit Website
  • NinjaOne
    6,065 Ratings
    Visit Website

About

As Comodo Advanced Endpoint Protection (AEP) protects your endpoints against malware, the AEP application itself routinely comes under attack by malicious applications trying to circumvent its protection. Fortunately, Comodo AEP includes robust self-protection countermeasures that prevent malicious applications from gaining control or circumventing Comodo AEP services. AEP does this by intercepting system calls that might present a threat to the applications such as Terminate Process or Create Remote Thread are obvious examples of calls that might pose a risk to AEP. Other less obvious but actually more dangerous call would be CreateFile as it can do a lot more than just create a file. Comodo AEP intercepts these calls and only allows them to proceed if they won’t harm the Comodo process. Comodo AEP also contains a kernel mode driver that it uses to prevent attempts to modify the system kernel directly.

About

Kernel Pack is a commercial Windows command-and-control platform with an integrated kernel agent for authorized red-team and penetration-testing operations. Its DOG engine discovers and validates kernel data-only gadgets at runtime, while more than 100 exploit backends provide kernel access and SYSTEM privileges. Capabilities include kernel memory access, token and PPL manipulation, process operations, ETW control, callback management, SSDT and Shadow SSDT hijacking, IDT/GDT execution, driver dispatch manipulation, and VTL0/VTL1 workflows. It is designed for red teams and penetration testers performing controlled, non-production Windows kernel assessments.

Platforms Supported

Windows Supported
Mac Supported
Linux Not Supported
Cloud Supported
On-Premises Not Supported
iPhone Supported
iPad Supported
Android Supported
Chromebook Not Supported

Platforms Supported

Windows Supported
Mac Supported
Linux Supported
Cloud Not Supported
On-Premises Supported
iPhone Not Supported
iPad Not Supported
Android Not Supported
Chromebook Not Supported

Audience

IT security teams searching for an advanced endpoint protection solution

Audience

Professional Windows kernel-security researchers, penetration-testing teams, red teams, adversary-simulation teams, and authorized internal security teams.

Support

Phone Support Supported
24/7 Live Support Not Supported
Online Supported

Support

Phone Support Not Supported
24/7 Live Support Not Supported
Online Supported

API

Offers API Not Supported

API

Offers API Supported

Screenshots and Videos

Screenshots and Videos

Pricing

No information available.
Free Version Supported
Free Trial Not Supported

Pricing

€1,200/year
€1,200 per year for one named user. A license may be used on one machine at a time. Software updates and technical support are included for one year; renewal is optional and may have special pricing.
Free Version Not Supported
Free Trial Not Supported

Reviews/Ratings

Overall 5.0 / 5
ease 4.5 / 5
features 4.5 / 5
design 4.5 / 5
support 4.5 / 5

Reviews/Ratings

Overall 0.0 / 5
ease 0.0 / 5
features 0.0 / 5
design 0.0 / 5
support 0.0 / 5

This software hasn't been reviewed yet. Be the first to provide a review:

Review this Software

Pros & Cons from Real Users

Pros

  • With this software, there is so much that I like. First, the software is affordable Deploying it and customizing the software to meet our needs is seamless. I like that there are always updates. I like the fact that the software is lightweight and unobtrusive.
  • Setting up and integrating Comodo was easy. Understanding the many features is straightforward. There are updates now and then to keep the tool well equipped Scanning is easy and fast. Protection is both from online and offline attacks.

Cons

  • I haven't experienced any issues with Comodo Advanced Endpoint Protection.
  • The the has always worked well and I cannot complain. No issues whatsoever.

Training

Documentation Not Supported
Webinars Not Supported
Live Online Not Supported
In Person Supported

Training

Documentation Supported
Webinars Not Supported
Live Online Supported
In Person Not Supported

Company Information

Comodo
Founded: 1998
United States
www.comodo.com

Company Information

Exploit Pack
Founded: 2008
Netherlands
www.exploitpack.com/products/kernel-pack

Alternatives

Alternatives

Minoca OS

Minoca OS

Minoca
Control Pack

Control Pack

Exploit Pack VOF
Comodo Dragon

Comodo Dragon

Comodo Security Solutions
syzkaller

syzkaller

Google
Comodo IceDragon

Comodo IceDragon

Comodo Security Solutions

Categories

Categories

Endpoint Protection Features

Activity Log Supported
Antivirus Supported
Application Security Supported
Behavioral Analytics Supported
Device Management Not Supported
Encryption Not Supported
Signature Matching Not Supported
Web Threat Management Not Supported
Whitelisting / Blacklisting Supported

Integrations

CYREBRO Supported
ClickSSL Supported
HostBill Supported
SSL2BUY Supported

Integrations

CYREBRO Not Supported
ClickSSL Not Supported
HostBill Not Supported
SSL2BUY Not Supported
Claim Comodo Advanced Endpoint Protection and update features and information
Claim Comodo Advanced Endpoint Protection and update features and information
Claim Kernel Pack and update features and information
Claim Kernel Pack and update features and information