I'd like to know more about what it's doing and how it works. I can imagine a couple scenarios: 1) It might have a "baseline" time during which it allows and r

I'd like to know more about what it's doing and how it works. I can imagine a couple scenarios: 1) It might have a "baseline" time during which it allows and records everything, and then locks down anything outside of that (like the old ZoneAlarm did for firewalls). 2) Or it might only lock down certain APIs? File and registry and network access? Not sure where you'd stop with that. What about when it emails everyone in Outlook? Unless I'm completely off base.