But frankly, from my experience, even when provoking it intentionally with actual malware, you will NEVER see it do anything for as long as it's set to Auto Decide (Ask mode doesn't really count as it's way too noisy). In all the time, i haven't seen a single detection by the Behavior Shield. Context or not, from my point of view it doesn't do much. I'd prefer a proper full featured Behavior Blocker like i've seen them years ago (Cyberhawk/ThreatFire) comes to mind. Or the older Kaspersky PDM which still seems to do remarkably well. Oh well...