Selecting the action to take on detection of external encryption of shared folders

To select the action to take on detection of external encryption of shared folders:

1. In the main application window, click the Settings button.
2. In the application settings window, select Advanced Threat Protection → Behavior Detection.
3. In the Protection of shared folders against external encryption section, in the On detection of external encryption of shared folders drop-down list, select the necessary action:
   • Block connection.

     If this option is selected and Kaspersky Endpoint Security detects an attempt to modify files in shared folders, it performs the following actions:

     • Blocks network activity of the computer attempting the modification.
     • Creates backup copies of files that are being modified.
     • Adds an entry to local application interface reports.
     • Sends information about the detected malicious activity to Kaspersky Security Center.

     Also, if the Remediation Engine component is enabled, the modified files are restored from backup copies.

     If you selected Block connection, you can specify the duration (in minutes) that the network connection will be blocked in the Block connection for N minutes field.

   • Inform.

     If this option is selected, on detecting an attempt to modify files in shared folders, Kaspersky Endpoint Security adds a record to local application interface reports, adds a record to list of active threats and sends to Kaspersky Security Center information about detection of malicious activity.

4. Save your changes.

Page top