Which category uses heuristics for improved detection rates?

• A. Detect Viruses
• B. Detect Suspicious Files
• C. Detect Hacking Tools and PUPs
• D. Detect Adware

Answer: (B)

Heuristics are about evaluating files for unusual features or behaviors to flag potential threats even without a known signature. This approach is most tied to detecting suspicious files, where the system looks for indicators like unusual packing, obfuscated code, odd macro patterns, or atypical API calls that suggest malware could be present. By focusing on these indicators, detection rates improve for new or altered samples that haven’t been cataloged yet. Other categories rely more on known signatures or rules tied to specific threat types, so heuristics aren’t the primary method there.