How do you work out heuristics for proactive detection? Do you know that some AVs are actually flagging packers instead of using real heuristics?

• 你们测试主动侦测的时候是如何判断启发式的?你们是否知道有一些杀软的启发式并非是真正的启发式,而是在报壳?