1. A method of controlling malicious activity detection, comprising: providing a first graphical interface element at a device that enables an administrative user to select a behavioral model to be associated with an information technology asset; and distributing a behavioral model indicator indicating the selected behavioral model to each of a plurality of protection services deployed on one or more processing modules to cause the plurality of protection services to utilize a plurality of respective protection rule configurations corresponding to the behavioral model to generate respective malicious activity assessments with respect to the information technology asset, wherein each protection rule configuration includes a respective plurality of protection rules having respective rule sensitivities.