Author Topic: Behaviour Shield action options  (Read 1602 times)

0 Members and 1 Guest are viewing this topic.

Offline rocksteady

  • Super Poster
  • ***
  • Posts: 1533
Behaviour Shield action options
« on: February 07, 2019, 10:14:20 PM »
I can read the difference, but can someone please explain the difference between options:
Automatically move detected threats to chest.
Automatically move known threats to chest.

Surely you can't move a threat to the chest unless it is actually detected - can you?
(Is there a subtle hidden meaning)
« Last Edit: February 09, 2019, 12:40:32 PM by rocksteady »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: Behaviour Sheield action options
« Reply #1 on: February 07, 2019, 10:46:43 PM »
Why do you think that it is called the Behaviour Shield, it monitors behaviour that could/would be suspect.

Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline rocksteady

  • Super Poster
  • ***
  • Posts: 1533
Re: Behaviour Shield action options
« Reply #2 on: February 08, 2019, 11:29:27 AM »
@David,
Yes I am aware of what the Behaviour Shield is and its history in Avast.

My question here is simply what is the difference between "known threat" and "detected threat" ?
Answer to that would be appreciated.
« Last Edit: February 09, 2019, 12:47:16 PM by rocksteady »

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88900
  • No support PMs thanks
Re: Behaviour Sheield action options
« Reply #3 on: February 08, 2019, 05:19:02 PM »
I can't give you a definitive answer (as an avast user like yourself), but a known threat could be a known means of exploit/entry but hasn't physically been detected.  There is probably only a very thin line between both definitions.

I generally I don't allow any autonomous actions preferring to make that decision myself.  That way I would at least know what program/file the behaviour shield is referring to and why it might be making that detection.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline rocksteady

  • Super Poster
  • ***
  • Posts: 1533
Re: Behaviour Shield action options
« Reply #4 on: February 09, 2019, 12:46:33 PM »
I have never had anything put in the chest that I am aware of as result of the behaviour shield (so far).

PS. I have corrected my original bad spelling of "Shield" in Subject line of my posts - may assist any searches in future.

Offline Evjls

  • Jr. Member
  • **
  • Posts: 96
Re: Behaviour Shield action options
« Reply #5 on: February 09, 2019, 08:13:58 PM »
"always ask" and "Automatically move detected threats to chest" are more powerful than the default one. They will detect more threats but increase false positive rate

As you know, the default option (detect KNOWN threat) only detects known threats

The first 2 options will expand avast's power