Behaviour-based detection

Behaviour-based detection monitors what programs do. Rapidly deleting or modifying files, attempting to access sensitive data or contacting known malicious servers can suggest malware. This can identify suspicious activity even without a known signature, although legitimate activity may also be flagged.