When using Cisco AMP for Networks, which feature copies a file to the Cisco AMP cloud for analysis?

Spero analysis is a specific type of static analysis engine within AMP, not the feature responsible for copying files to the cloud for execution.

Dynamic analysis involves executing suspicious files in a secure, isolated cloud environment to observe their behavior and identify malicious activities. This process automatically copies the file to the AMP cloud for behavioral inspection.

Sandbox analysis is a method of dynamic analysis, but 'dynamic analysis' is the broader feature that encompasses sending the file to the cloud for execution and behavioral observation.

Malware analysis is a general term for understanding malicious software, not a specific feature for copying files to the cloud for behavioral execution.