Behavior monitoring constantly monitors endpoints for unusual modifications to the operating system or on installed software.
Administrators (or users) can create exception lists that allow certain programs to start despite violating a monitored change, or completely block certain programs.
In addition, programs with a valid digital signature or have been certified are always allowed to start. Use Core Protection Module - Enable Certified Safe Software Service.
The Behavior Monitoring capabilities of Core Protection Module now support 64-bit versions of the following platforms: