By default, Behavior Detection is enabled and runs in the mode recommended by Kaspersky experts. You can disable Behavior Detection if necessary.
It is not recommended to disable Behavior Detection unless absolutely necessary because doing so would reduce the effectiveness of the protection components. The protection components may request data collected by the Behavior Detection component to detect threats.
To enable or disable Behavior Detection:
In the main application window, click the Settings button.
In the application settings window, select Advanced Threat Protection → Behavior Detection.
Do one of the following:
Select the Behavior Detection check box if you want Kaspersky Endpoint Security to use behavior stream signatures to analyze application activity in the operating system.
Clear the Behavior Detection check box if you do not want Kaspersky Endpoint Security to use behavior stream signatures to analyze application activity in the operating system.