BastionGuard 2.0.1

BastionGuard 2.0.1 is a maintenance and security-focused release that resolves the ransomware real-time quarantine handling issue.

Fixed

Ransomware real-time quarantine

• Fixed an issue that could cause a parent directory to be moved instead of the individual detected file.
• Added strict validation so that quarantine operations accept regular files only.
• Directories are now explicitly rejected.
• Symbolic links and unsupported filesystem objects are rejected.
• Quarantine operations are now handled through a centralized validated implementation.
• Quarantined files are displayed correctly in the Quarantine interface.
• The original parent directory remains unchanged.
• The quarantine location is excluded from real-time rescanning.

Validation

The correction was validated with a harmless dedicated YARA test rule.

The complete workflow was tested successfully:

• real-time file detection;
• alert generation with the complete file path;
• quarantine of the individual file;
• preservation of the parent directory;
• immediate display in the Quarantine interface;
• successful file restoration;
• immediate detection after restoration while the YARA signature remained present.

Upgrade recommendation

All BastionGuard 2.0 users are advised to upgrade to version 2.0.1.

Release: 2.0.1 Type: Bug-fix release Affected component: Ransomware Real-Time Protection / Quarantine