1. What Are Symantec Endpoint Protection Definitions? In the context of Symantec Endpoint Protection (SEP), Definitions (often called virus definitions , signatures , or DAT files ) are a set of unique identifiers used by the SEP software to recognize known malware threats. Think of them as a digital "wanted poster" database.
Every time a file is opened, executed, or saved, SEP scans its code and compares it against these definitions. If a match is found, the software quarantines, deletes, or repairs the file. symantec endpoint protection definition
Definitions are not static; they are updated multiple times per day to keep pace with new viruses, worms, trojans, ransomware, and other forms of malware. Symantec uses several layers of definitions, not just one. Understanding these layers helps clarify why SEP behaves differently on different systems. Think of them as a digital "wanted poster" database