Guest: You want to know about the Behavior Shield
Webroot:This solution addresses Webroot SecureAnywhere Business – Endpoint Protection

The Behavior shield analyzes the applications and processes running on your managed endpoints. If it detects a suspicious file, it opens an alert and prompts you to block or allow the item. If it detects a known threat, it immediately blocks and quarantines the item before it causes damage to managed endpoints or steal its information.

Behavior shield settings
Behavior Shield Enabled Turns the Behavior shield on and off
Assess the intent of new programs before allowing them to execute Watches the program's activity before allowing it to run. If it appears okay, SecureAnywhere allows it to launch and continues to monitor its activity.
Enable advanced behavior interpretation to identify complex threats Analyzes a program to examine its intent. For example, a malware program might perform suspicious activities like modifying a registry entry, then sending an email.
Track the behavior of untrusted programs for advanced threat removal Watches programs that have not yet been classified as legitimate or as malware.
Automatically perform the recommended action instead of showing warning messages Does not prompt the user to allow or block a potential threat. SecureAnywhere determines how to manage the item.
Warn if untrusted programs attempt low-level system modifications when offline Opens an alert if an unclassified program tries to make changes to your managed endpoints when they are offline. (SecureAnywhere cannot check its online threat database if endpoints are disconnected from the Internet.)

Webroot: Did I answer your question?
Ask your question: Restart your session Restart your session
Powered by noHold, Inc. U.S. Patent No. 6,604,141