Behavior Detection task (Behavior_Detection, ID:20)
February 8, 2024
ID 198116
The Behavior Detection task monitors malicious activity by applications in the operating system. When malicious activity is detected, Kaspersky Industrial CyberSecurity for Linux Nodes can terminate the application process that is performing malicious activity.
By default, the Behavior Detection task starts automatically when the application starts. You can stop the task at any moment if necessary.
Behavior Detection task setting
Setting | Description | Values |
---|---|---|
| Action performed by the application when malicious activity is detected in the operating system. |
|
| Excluding processes from scans. |
|
The [TrustedPrograms.item_#] section contains processes that are excluded from scans. Kaspersky Industrial CyberSecurity for Linux Nodes does not monitor the activity of the specified processes. | ||
| Path to excluded process. |
|
| Exclude child processes of the excluded process specified by the |
|
| Description of the excluded process. |
|