I can read the difference, but can someone please explain the difference between options:
Automatically move detected threats to chest.
Automatically move known threats to chest.
Surely you can’t move a threat to the chest unless it is actually detected - can you?
(Is there a subtle hidden meaning)
I can’t give you a definitive answer (as an avast user like yourself), but a known threat could be a known means of exploit/entry but hasn’t physically been detected. There is probably only a very thin line between both definitions.
I generally I don’t allow any autonomous actions preferring to make that decision myself. That way I would at least know what program/file the behaviour shield is referring to and why it might be making that detection.
“always ask” and “Automatically move detected threats to chest” are more powerful than the default one. They will detect more threats but increase false positive rate
As you know, the default option (detect KNOWN threat) only detects known threats