Malware Behavior Blocking analyzes program behavior to proactively protect against both known and unknown threats. Malware Behavior Blocking observes system events and blocks programs that exhibit malicious activity. Use this feature to ensure a higher level of protection against new, unknown, and emerging threats.
After detecting malicious activity, Malware Behavior Blocking performs one of the following actions:
Block: Prevents programs exhibiting malicious behavior from making changes to the endpoint.
Terminate: Closes programs that exhibit malicious behavior.
Clean: Closes programs that exhibit malicious behavior. If a program is verified to be a threat, deletes files and other objects associated with the malicious program.