“The ability of the product to detect and report successful infections in a timely manner is critical to maintaining the security and functionality of the monitored network. ...should be able to detect known samples, or analyze unknown samples, and report on them within 24 hours of initial infection and command and control (C&C) callback. ...will not receive credit for the detection.”

The entire above statement is the problem with all solutions on the market right now. The strategy of detecting and monitoring is a loosing strategy.
***If I am your neighbor and you pay me $100,000+ per year to protect your home while you're away and all I do is call you when someone breaks in, what good is that?!?!
- The home owner's response should be, "I'm paying you all this money, why didn't you stop the intruder?"
As security professionals we need to shift our mindsets away from detection because the damage has already been done at that point. These criminals change everyday and we're not keeping up with them. 100% detection just means you're a great spectator, congrats.