Does Exec Protection use Heuristics or only sigs ?

[Defenestration]

As title

[WSFuser]

doesnt it have settings u can customize? i only used trial so i only remember that the scanner had settings.