Files are sent to the WildFire cloud service via the WildFire Analysis Profile. How are these files used?

WildFire's primary use of submitted files is for analysis, which then *leads* to the generation of new signatures, but files are not sent to be signature updates themselves.

Files sent to the WildFire cloud service are primarily used for advanced malware analysis. WildFire executes suspicious files in a secure, virtualized environment (sandbox) to observe their behavior, identify malicious activities, and determine if they are unknown malware.

Domain Generation Algorithm (DGA) learning is a specific technique used in threat intelligence to identify malicious domains, but it is not the overarching primary use for submitted files to WildFire, which focuses on file behavior.

Spyware analysis is a specific type of malware analysis, and WildFire's scope is broader, encompassing various forms of malicious software beyond just spyware.