a particular element of anti-malware software package, frequently known as an on-access or authentic-time scanner, hooks deep in to the running process's core or kernel and features inside of a way much like how particular malware itself would try to function, however Together with the person's knowledgeable authorization for shielding the system.