By default, Behavior Detection is enabled and runs in the mode recommended by Kaspersky experts. You can disable Behavior Detection if necessary.
It is not recommended to disable Behavior Detection unless absolutely necessary because doing so would reduce the effectiveness of the protection components. The protection components may request data collected by the Behavior Detection component to detect threats.
To enable or disable Behavior Detection:
In the main application window, click the Settings button.
In the left part of the window, in the Advanced Threat Protection section, select the Behavior Detection subsection.
In the right part of the window, the settings of the Behavior Detection component are displayed.
Do one of the following:
Select the Behavior Detection check box if you want Kaspersky Endpoint Security to use behavior stream signatures to analyze application activity in the operating system.
Clear the Behavior Detection check box if you do not want Kaspersky Endpoint Security to use behavior stream signatures to analyze application activity in the operating system.