They also rely on users submitting malicious as files...and analysing them