Behavior monitoring signature

Definition
A behavior monitoring signature is

"[a] type of signature that is based on behaviors or activity that is commonly used for malicious purposes, such as renaming folders or creating certain types of shortcuts."