Standard Shield scans files that are copied,created,moved,downloaded and opened/executed. Thats pretty much all that i can say about it. If you need anything more specific just ask