Malware Behavior Blocking analyzes program behavior
to proactively protect against both known and unknown threats. Malware
Behavior Blocking observes system events and blocks programs that
exhibit malicious activity. Use this feature to ensure a higher
level of protection against new, unknown, and emerging threats.
After detecting malicious activity, Malware Behavior Blocking
performs one of the following actions:
-
Block: Prevents programs exhibiting malicious behavior from making changes to the
endpoint.
-
Terminate: Closes programs that exhibit malicious
behavior.
-
Clean: Closes programs that exhibit malicious
behavior. If a program is verified to be a threat, deletes files
and other objects associated with the malicious program.