Hello Ukko, SAFE is phenomenel as it currently is but a change in settings would mean that DeepGuard (the behaviour blocker) will be more reactive due to one changing the settings to aggressive, as well as mitigating any infection by unknown malware. Further to your point, newly created malware which have no known signatures may be hard to detect by the behaviour blocker so thus one tweaking the setting to aggressive will imprve the chances of the behaviour blocker mitigating an infection. One example is DUQU.2.0, the malware that struck Kaspersky Lab. They did not know about the infection until the malware was harvesting data and the malware was not known to KSN or to their signatre databse, so one changing the settings to aggressive will maje the behviour blocker more reactive and thus mitigate an infection. ... View more