As I heard of,it is with a small black list but it mainly uses behavior to estimate the files
I have used the software.You dont need to configure the software and it works efficiently,it has a simple firewall and have five default rules...
ssm:isay:
Separate names with a comma.