Sandboxing

Sandboxing – The technique of executing a file in an isolated environment to observe its behavior and detect malware, including zero-day threats that signature-based scanning would miss; ATP uses cloud multi-sandboxing and reports a verdict such as clean, suspicious, or malicious. See: Manage ATP File Reports, Flow Logs