Check details about recent threat events

You can view information about recent files and certificates seen in your environment and the actions taken in response to an identified threat.

Task

Select Menu → Reporting → Adaptive Threat Protection Events.
The Adaptive Threat Protection Events page shows several views of recent events.
In the Select Event View drop-down list, select the type of events to show.
- Enforcement Events show enforced policy events and the actions taken.
- Observation Events show the observed policy events, such as Would Block, where no action was taken.
Select a chart to see detailed information.
In the Select Pivot Point drop-down list, select how to view events: by certificate, file hash, rule, or system. Then, select a specific item in the list to see more details.