Behavior Detection
July 25, 2024
ID 198117
By default, the Behavior Detection component starts when Kaspersky Industrial CyberSecurity for Linux Nodes starts and monitors malicious activity in the operating system. When malicious activity is detected, Kaspersky Industrial CyberSecurity for Linux Nodes can terminate the application process that is performing malicious activity.
Behavior Detection setting
Setting | Description |
---|---|
Enable Behavior Detection | This check box enables or disables the Behavior Detection component. The check box is selected by default. |
Behavior Detection component operating mode | The action that the application performs upon detecting malicious activity in the operating system:
|
Use exclusions by process | This check box enables or disables exclusions by process in the operation of the Behavior Detection component. This check box is cleared by default. The Configure button opens the Exclusions by process window. In this window, you can exclude the activity of processes. |