Network Security DQ 2

Research new network observation tools that use enhanced techniques, such as virtual machine-based code execution, to detect unwanted network traffic (e.g., botnet activity or malware activity that is not detectable by traditional Anti-virus techniques). Are these tools as good as they seem? Do they do the job well enough? Are they filling in the gaps of detection that seem to appear as hackers get better at what they do?