Types of scans

You can set up your systems to scan files on access automatically and on demand manually or on a schedule.

Threat Prevention Options includes settings that apply to all scan types.

On-access scan — Configure the on-access scanner in the On-Access Scan settings.
When files, folders, and programs are accessed, the on-access scanner intercepts the operation and scans the item, based on criteria defined in the settings.
On-demand scan

Manual	Run a predefined on-demand scan at any time from the Trellix Endpoint Security (ENS) Client by clicking Scan System, then selecting a scan type. Quick Scan runs a quick check of the areas of the system most susceptible to infection. Full Scan performs a thorough check of all areas of the system. (Recommended if you suspect the computer is infected.)	Configure the behavior of full and quick scans in the On-Demand Scan settings.
	Scan an individual file or folder at any time from Windows Explorer by right-clicking the file or folder and selecting Scan for threats from the pop-up menu.	Configure the behavior of the Right-Click Scan in the On-Demand Scan settings.
	Run a custom on-demand scan as administrator from the Trellix Endpoint Security (ENS) Client: Select Settings → Common → Tasks. Select the task to run. Click Run Now. Tip Best practice: Use manual custom on-demand scans to associate a scan task with a reaction, such as a malware infection.	Configure custom scans in the Common Tasks settings.
Scheduled	When a scheduled on-demand scan is about to start, Endpoint Security displays a scan prompt at the bottom of the screen. You can start the scan immediately or defer the scan, if configured.

	Schedule the predefined on-demand scans in the Settings → Common → Tasks settings. Quick Scan — By default, the Quick Scan is enabled and scheduled to run every day at 7 p.m. Full Scan — By default, the Full Scan is enabled and scheduled to run every Wednesday at 12 midnight. Tip Best practice: Use the weekly Full Scan to supplement the continuous protection of the on-access scan. The full scan includes fewer exclusions and actively checks all files for malicious code. Check the OnDemandScan_Activity log file for scan statistics, such as start time, end time, and time to complete the scan. From the Event Log page in Trellix Endpoint Security (ENS) Client, click View Logs Folder. Most recent scan tasks activity appears at the bottom of the file.	Configure the behavior of full and quick scans in the On-Demand Scan settings.
	Schedule custom on-demand scans in the Common Tasks settings. Tip Best practice: Use scheduled custom on-demand scans for targeted scans, such as daily memory scans.	Configure custom scans in the Common Tasks settings.