McAfee GetSusp is a tool that identifies suspicious files on a given system. Competitive tools can provide information about system state, but depend on a user's technical skills, McAfee GetSusp is the first tool that can collect suspect samples with reasonable accuracy.