Does “Application Behaviour Analysis” check all processes regardless of whether they are able to make a connection or not?
I believe it depends on if the process in question, is either a parent of a process that does have Net access or if the process communicates with another process that has Net access or is a parent of processes with Net access. This is what CPF is interested in. But, does it scan every process to discover this? I would guess yes. But, only Egemen can say for sure.
Thanks for the reply kail :). I thought I would ask this as I’m also running system safety monitor.