We have been evaluating different antivirus solutions, and have been running different simulators, as well as deploying actual known Malware (on isolated, obsolete equipment). There have been mixed results, with one provider (Company A) knocking it out of the park, one doing a marginal job (Company B), and one falling on its face (Company C).
When we asked Company B about this, they replied that these simulations are not worth anything, and they are damaging to the AV industry. They stated that because these are intentionally run, they are not actually real examples of malware or ransomware, and their software decides not to block them intentionally.
Specifically, we ranKnowBe4RanSim. Company A blocked all threats, while the other two did not block a single one. Can I fairly assume that Company A will do a better job that the other two?...