Behavioral Scanning (Windows Only)
Behavioral Scanning is a proactive detection technology which uses heuristic methods to detect new potential threats in real time. Behavioral Scanning observes process actions and gives them a score. Where the overall score for a process reaches a given threshold. Managed Antivirus considers the process to be harmful and takes the Default remediation action for behavioral threats.
From Managed Antivirus (Bitdefender) version 5. Behavioral Scanning includes Bitdefender's Intrusion Detection System. This monitors the system for suspicious activities. including unauthorized attempts to alter Bitdefender files, DLL injections, keylogging attempts etc.
Exclusions: Behavioral Scanning only supports Process exclusions.
You can create Exclusions regardless of whether the processes are present. Any Behavioral Scanning exclusions are only evaluated when an individual process runs.
The computer requires a reboot for any Behavioral Scanning exclusion changes to take effect.
The Windows Managed Antivirus Agent refers to Behavioral Scanning as Advanced Threat Control.
Setup Behavioral Scanning
To active Behavioral Scanning
- Click Enabled then Settings.
- Decide on whether to Prompt user for action when behavioral threat detected
- Select the Default remediation action for behavioral threats from Block or Disinfect
- Where the remediation action is set to Disinfect. Managed Antivirus quarantines the existing application. Then attempts to back out any changes the application made to the system.
- If the remediation action is set to Block, the application is not allowed to run.
- Choose the Behavioral Scanning Sensitivity level from Aggressive, Normal or Permissive.
More aggressive settings may result in false positives.
What do you want to do?
- Review the Managed Antivirus Quick Start Guide
- View Managed Antivirus URLs
- Enable Managed Antivirus on individual servers and workstations or on all servers and workstations at a client or site