Selecting an action to take when an exploit is detected

By default, on detection of an exploit, Kaspersky Endpoint Security blocks operations attempted by the exploit.

To choose an action to be taken when an exploit is detected:

  1. In the lower part of the main application window, click the icon_settings button.
  2. In the application settings window, select Protection → Advanced Threat Protection → Exploit Prevention.
  3. Select the relevant action in the On detecting exploit block:
    • Block operation. If this item is selected, on detecting an exploit, Kaspersky Endpoint Security blocks the operations of this exploit and makes a log entry with information about this exploit.
    • Inform. If this item is selected, when Kaspersky Endpoint Security detects an exploit it logs an entry containing information about the exploit and adds information about this exploit to the list of active threats.
  4. Save your changes.
Page top