Reference Guide

Security Management Server Virtual - AdminHelp v9.8
231
(confidence level), AV Industry conviction (links to VirusTotal.com for comparison with other vendors), Date
first found, Data last found, SHA256, MD5, File information (author, description, version), and Signature
details.
Filter Events Table Data
Click the Threat Filters dropdown list at the upper right side of the table to view data about events
by Priority, Status: Last 24 Hours, and Status: Total.
The number of events occurring in each subcategory are shown in parentheses.
Priority: Unsafe - Select a priority to view only events that match the selected priority. High,
Medium, or Low.
Status: Last 24 Hours - Select a status to view only events that have had changes to this status in the
last 24 hours.
Status: Total - Select a status to only events with that status.
The predictive threat model used to protect devices receives periodic updates to improve detection rates.
To understand differences in how a new threat model affects information about files in your organization,
see Threat Model Updates
.
Commands
Select a threat to act on it. On this page, you can do the following to the selected threat data:
Export - Export threat data to a CSV file.
Select the rows you want to export, and then click Export.
Open the file with Microsoft Excel or similar application, which allows you to sort and organize the
data.
Global Quarantine - Add a file to the global quarantine list. The threat is permanently quarantined
from all devices.
Add the selected file to the Global Quarantine list to prevent it from being run on any device in the
organization. Adding a file to Quarantine removes it from lists of Unsafe files.
1. Select a threat.
2. Click Global Quarantine.
3. Enter a reason that this file should be global quarantined and click Yes.
Safe - Add a file to the safe list. The file is permanently treated as safe across all devices.
1. Select the file you want to list as safe.
2. Click Safe.
3. Select the category that fits the file.
4. Enter a reason why the file should be listed as safe, and click Yes.
Note: Occasionally, a “good” file may be reported as unsafe (this could happen if the
features of that file strongly resemble those of malicious files). Waiving or safelisting the
file can be useful in these instances.
Edit Global List - Add or remove files from the global quarantine list.
1. Click Edit Global List.
2. Select the items you want to change.