Turn on behavior monitoring
Supported on: At least Windows Server 2012, Windows 8 or Windows RT
Registry
HKLM
Software\Policies\Microsoft\Windows Defender\Real-Time Protection Value name: DisableBehaviorMonitoring
Enabled: DisableBehaviorMonitoring = 0
Disabled: DisableBehaviorMonitoring = 1
Description
This policy setting allows you to configure behavior monitoring. If you enable or do not configure this setting, behavior monitoring will be enabled. If you disable this setting, behavior monitoring will be disabled.