Static analysis engine
Know what a file actually is before you run it.
NS Guard inspects files by signature, structure, and behavior pattern, not by trusting a filename. Every result shows its evidence.
Scan a file
01
Signature identification
Every file is identified by its actual byte structure, so a renamed executable cannot pass as an image or document.
02
Structural inspection
PE headers, sections, imports, and entropy are parsed directly. Archives are extracted and each file inside is analyzed on its own.
03
Correlated indicators
Credential and session-theft heuristics require multiple corroborating signals before flagging anything, not a single keyword match.