Dismiss threats from the potential threat list

Prev Next

Based on the investigation analysis if the threat is non-malicious, you can dismiss the particular threat from the potential threat list. If a device sends an alert about this threat as a new trace, the threat appears again in the threat list.

  1. Log on to Trellix EDR.

  2. Select MenuMonitoring.

  3. On the Threats by Ranking / Threats by Time pane, select a threat to dismiss it from the potential threat list.

  4. Select the Dismiss option from the Take Action menu.

    The Dismiss threat window appears.

    You can also dismiss a threat selecting dismiss this threat option from the Exclude from threats take action menu.

  5. Click Confirm to complete the dismiss threat action.

  6. On the Action History dashboard, Action Status displays the dismissed threat action as Completed.

The dismissed threats from the Monitoring dashboard are added to Manage threat exclusions on the Configuration page.