ProcessBehavior
ProcessBehavior events are reported on Windows. Antivirus tracks which files were accessed and how frequently. If the process accessed more files than are set in the barrier in a certain time period, this event is reported.
Property |
Type |
Description |
Example |
|---|---|---|---|
FileOperations |
String |
Operations and their barriers |
Possbile values are: •WrBarrier1 •WrBarrier2 •RenameBarrier1 •RenameBarrier2 •MultiextWrBarrier1 •MultiextWrBarrier2 •MultiextRenameBarrier1 •MultiextRenameBarrier2 •BlobDetection |
|
The FileOperations values are internal and are intended to be used only with default rules. |
Supported Operations and their components:
|
ProcessBehavior |
|---|---|
MultipleFilesChanged |
X |