why does threatfire need to update?

i know its a behavior blocker but why does it need to update?

 

to fix bugs, add new functionality, new behavior patterns to detect, etc.

 

also database

 

I'd like to know database of what? I thought it wasn't supposed to rely on signatures.

 

Behavior Database, Threatfire has to know what behavior is good and what behavior is bad.

 

I see. Does such database update as often like daily with AV's?

 

Nope, I think they most of their database is in the cloud. They only send out database updates a few times a week, not every day.

 

Data base also has signatures, infact TF has a smart signature data base in add to behav blocker.

 

Then I guess their FAQ should be updated :

 

As I know signatures are there only to name some threats otherwise detection is ONLY triggered by a bad behaviour.

 

Database updates generally occur twice a day, usually the TFBL db.