Views:

For this scenario, when the encrypted files are decrypted and written to the disk, DSA would scan them when Real-Time Anti-Malware is enabled.