Security+5e Lab7-2: Using Behavior-Based Monitoring Tools

Instead of using statistics or signatures as the standard by which comparisons are made, behavior-based monitoring uses the “normal” processes and actions as the standard. Behavior-based monitoring continuously analyzes the behavior of processes and programs on a system and signals alerts if it detects any abnormal actions so the user can then decide whether to allow or block the activity. In this lab, we'll install and use ThreatFire, behavior-based monitoring tool.