Constantly monitors files and programs as they are accessed, checking for any malicious code or behavior in real-time.