From a vendor’s point of view, the answer is probably “whatever it is you claim we didn’t detect”. But of course it isn’t always that simple, especially as the testing industry moves gradually away from testing with static files. (At last!) Simon does his usual excellent job of explaining the issues that arise when a vendor asks for samples after a test.
Small Blue-Green World
ESET Senior Research Fellow