sentences:  The analyst will therefore make a rule that says if we see this string of behaviors, then we should stop the process from executing.Doing all of this is a big deal—we aren’t just looking at what the process does on your computer, we are also looking at its communication characteristics!Sonar 4.0 also introduces protection against Non Process Threats (NPTs).