With Defense+ (a full HIPS) is my opinion.
It could be overkilling with avast behavior shield and autosandboxing thought.