What kind of detection techniques is being used in antivirus softwares that identifies malware by collecting data from multiple protected systems and instead of analyzing files locally it's made on th

Behavioral-based detection monitors the runtime actions of a process locally on the endpoint - such as file system writes or registry modifications - to identify malicious activity without relying on cloud analysis.

Heuristics-based detection analyzes the static structure, code patterns, or characteristics of a file locally to identify potential malware without requiring a prior known signature.

A honeypot is a deception-based security mechanism - a decoy system or resource deployed to lure and detect attackers - not an antivirus detection methodology.

Cloud-based detection works by collecting telemetry and file metadata from multiple protected endpoints and submitting it to the vendor's cloud environment for analysis rather than performing all evaluation locally. This approach enables the provider to apply constantly updated threat intelligence and shared signals from millions of endpoints simultaneously. It reduces local resource consumption and improves detection speed for emerging threats across the entire customer base.