No it isn’t active by default, it is an on-demand scan (has to be created/initiated by the user), it is not a resident on-access scan like that of the file system shield.