
Don’t apply to new types of threats that are executed as new executables at the endpoints because there is no known signature to compare against. Endpoint protection products don’t have a perfect list of threats to detect all signatures that exist or are known.
Most anti-malware solutions that are signature based rely on a known list of signatures: The traditional way of detecting an advanced malware or threat compromise in a Windows environment using a signature-based anti-virus or malware product is difficult.