Valkyrie/Cloud is useless yet.
Detection depends on how Valkyrie will work in CCAV & Valkyrie database.
If you rightclick & run installers sandboxed & cancel installation mid-way, you cannot close the window And you have to go into the GUI to reset sandbox.
If I remember correctly, I had mentioned the prob with the early versions of CCAV And its still not fixed.
I think like CIS, autosandbox shouldn't be cleared automatically on programs close/exit in CCAV. And "Unblock Applications" should be there in CCAV with anything/everything sandboxed/blocked registered there.
A lite firewall would be good (customize option to install/not install AV/FW, etc features/components).