... many existing tools [are] ineffective "magic" that engineers are forced to install for the sake of compliance but at the expense of real security.

http://www.theregister.co.uk/2016/11/17/google_hacker_pleads_try_whitelists_not_just_bunk_antivirus_ids/