Configuring AV-Suite to store the objects using the CLI

Prev Next

Follow these steps to configure how long you want to store information (filename, file type, engine type, MD5 checksum, and SHA-256 hash file) in AV-Suite for malicious and non-malicious objects using the CLI.

To view the signature , source and other details of an SHA-256 hash file, use the show analysis intel sha256 <sha256> command.

To view the signature , source and other details of an MD5 checksum, use the show analysis intel MD5 <MD5> command.

To configure the length of time to store the objects:
  1. Go to CLI configuration mode:

    hostname > enable
    hostname # configure terminal
  2. Specify how long you want to store the objects.

    hostname (config) # analysis retro-hunt time <hours>

    The range is from 1 to 720 hours. The default value is 0 hours, which means an unlimited time period.

  3. Save your changes.

    hostname (config) # write memory
  4. Verify the setting for how long the objects are stored in AV-Suite.

    hostname (config) # show analysis config
      .....
    
        Analysis reset duplicate since           : 2018/04/19 10:41:23
    
        Retroactive hunting                      : Enabled
        Retroactive hunting time                : 0 hours
        Retroactive update interval              : 300 seconds
    
        VM throttling                            : AUTO
    
        Riskware detection                       : Disabled
        Block Riskware                           : No
        .....