What kind of detection techniques is being used in antivirus softwares that identifies malware by collecting data from multiple protected systems and instead of analyzing files locally it's made on th

Behavioral-based detection monitors process actions, system calls, and runtime behavior on the local machine to flag anomalies - it does not involve sending data to a provider's environment for analysis.

Heuristic-based detection uses locally executed rules and code analysis algorithms to evaluate files without requiring connectivity to a cloud provider or data aggregation from multiple systems.

A honeypot is a decoy system or resource designed to attract and study attackers - it is a network defense and research technique, not a file detection mechanism within antivirus software.

Cloud-based detection collects data from multiple protected endpoints and transmits it to the vendor's cloud environment for centralized analysis, rather than relying on local signature files or local heuristic engines. This model enables near-real-time threat intelligence updates across all clients simultaneously and benefits from collective telemetry gathered across the entire user base. It directly matches the scenario of data being collected from multiple systems and analyzed in the provider's environment.