Zero-Day

Zero-day exploits are highly valuable to attackers because defenders have no ready fix and signature-based tools cannot detect them. Detecting zero-day exploitation requires behavioral detection capabilities rather than reliance on known signatures. Zero-days are often associated with nation-state actors and sophisticated criminal groups, and their use is a strong indicator of a high-priority, high-skill threat that requires immediate and thorough investigation.