SEP 14.0 Machine Learning?

Hello Symantec,

I've read that SEP 14 added machine learning capabilities for pre-execution detection. However, I cannot find more information about this. What I would like to know if this is an endpoint-based machine learning or it is dependent on cloud lookups? By endpoint-based, does this means that even if the machine is not connected to the internet it should be able to distinguish  between good and bad files?

Also, does SEP14 has post-execution machine learning capabilities? If so, can you discuss more about it as well? 

Thanks in advance.

SMRenan