Behavioural Protection, which is better?

In terms of protecting against unknown threats, IMO behaviour protection is more important than heuristic. So only consider this aspect, how are these working?