I am also not sure what’s the difference between high and low cache, but I am assuming, high cache only contains whatever is verified and trusted online. Judging by the small behavioural blocker database, high cache files are excluded from behavioural monitoring as well, unless McAfee pushes an exoneration (move them from trusted to untrusted).
On my system, the behavioural blocker database is 200KB which is probably the smallest I’ve seen. Compared to Check Point Harmony, another super effective solution which builds a gigabyte of EFR database in just a few days.
The low cache (low trust most likely) files are still monitored by Real Protect post-execution, but they are not scanned again.
Yeah, there are no settings as to what file size can go in quarantine.
On my system, the behavioural blocker database is 200KB which is probably the smallest I’ve seen. Compared to Check Point Harmony, another super effective solution which builds a gigabyte of EFR database in just a few days.
The low cache (low trust most likely) files are still monitored by Real Protect post-execution, but they are not scanned again.
Yeah, there are no settings as to what file size can go in quarantine.


