Nothing Proactive at all, and even the Tesla detection was reactive and not proactive.
Consider that Tesla is a ransomware type that will spawn its payload (usually somewhere in App Data), and immediately after the spawning is coded to self-delete. Note that in the video the detection happened about 12 seconds after the malware file was executed- when the Tesla icon vanished this was a function of the suicide coding of the malware and not anything that McAfee accomplished. The Tesla detection was for the original vector that no longer existed anyway and the actual spawned payload was ignored and was allowed to encrypt the files.
The time lag that was seen is totally inexcusable in any Cloud based security product, and especially bad here since McAfee has been incorporating a cloud compnent in their Enterprise products since 2012.
