With Defense+ (a full HIPS) is my opinion. It could be overkilling with avast behavior shield and autosandboxing thought.