Apply heuristics before or after

[Page42]

I have read the Prevx help file (http://info.prevx.com/edgehelp.asp), paying particular attention to the Heuristics Settings section, but a question still remains.

I can't figure out whether it is best to apply heuristics before or after Age/Popularity detection? :-\

I'd be interested in learning what other users are doing with this setting... and why.

[PrevxHelp]

Apply before/after essentially means: apply heuristics irrespective of the age of the file, or take the age of the file into account. So, applying heuristics before Age/Popularity detection (the default) will detect a file by heuristics regardless of how old it is, which could cause marginally more FPs and Apply After will cause marginally lower detection as it will only apply heuristics to files which are new to the community.

Hope that helps :)

[StevieO]

Have to agree.

I initially found " apply heuristics before or after Age/Popularity detection " a bit confusing. It's the Age/Popularity description that i feel could be reworded to make things a lot clearer.

How about, Apply heuristics - with historic data base - or - with community data base.