File and certificate actions

The following actions are available for selected files and certificates.

File Actions options

Option	Definition
Actions	File Known Trusted Installer — Change the file's reputation to File Known Trusted Installer. Warning If you change a file reputation to File Known Trusted Installer, all actions and files that the file executes and creates are, by default, treated as known trusted. File Known Trusted — Change the file's reputation to Known Trusted. File Most Likely Trusted — Change the file's reputation to Most Likely Trusted. File Unknown — Change the file's reputation to Unknown. File Most Likely Malicious — Change the file's reputation to Most Likely Malicious. File Known Malicious — Change the file's reputation to Known Malicious. Associated Certificate Details — View details about the certificate with which the file is signed, including its issuer. A file can be signed by more than one certificate. Children Files — Shows the children file (.exe) or installer for the selected file. File Parents — Shows the file parent file (.exe) or installer for the selected file. Where Was File Used — View the systems where the selected file was used. Choose Columns — Specify which columns display in the table. Export Table — Save the file information to an external file format. Refresh GTI Reputation — On the Actions menu, select Refresh GTI Reputation to update the reputation value of the selected file. Remove — Offers the following options: Remove Override to delete the Enterprise Reputation. IVX Cloud Provider Reputation to delete the reputation reported by IVX Cloud. IVX Provider Reputation to delete the reputation reported by IVX. Reputation from External Provider to delete the reputations reported by an external provider. TIS Provider Reputation to delete the reputation reported by Intelligent Sandbox.

Option

Definition

Actions

File Known Trusted Installer — Change the file's reputation to File Known Trusted Installer.

Warning
If you change a file reputation to File Known Trusted Installer, all actions and files that the file executes and creates are, by default, treated as known trusted.

File Known Trusted — Change the file's reputation to Known Trusted.

File Most Likely Trusted — Change the file's reputation to Most Likely Trusted.

File Unknown — Change the file's reputation to Unknown.

File Most Likely Malicious — Change the file's reputation to Most Likely Malicious.

File Known Malicious — Change the file's reputation to Known Malicious.

Associated Certificate Details — View details about the certificate with which the file is signed, including its issuer. A file can be signed by more than one certificate.

Children Files — Shows the children file (.exe) or installer for the selected file.

File Parents — Shows the file parent file (.exe) or installer for the selected file.

Where Was File Used — View the systems where the selected file was used.

Choose Columns — Specify which columns display in the table.

Export Table — Save the file information to an external file format.

Refresh GTI Reputation — On the Actions menu, select Refresh GTI Reputation to update the reputation value of the selected file.

Remove — Offers the following options:

Remove Override to delete the Enterprise Reputation.
IVX Cloud Provider Reputation to delete the reputation reported by IVX Cloud.
IVX Provider Reputation to delete the reputation reported by IVX.
Reputation from External Provider to delete the reputations reported by an external provider.
TIS Provider Reputation to delete the reputation reported by Intelligent Sandbox.

Certificate Actions options

Option	Definition
Actions	The following actions are available for the selected certificate. Cert Known Trusted — Change the certificate's reputation to Known Trusted. Cert Most Likely Trusted — Change the certificate's reputation to Most Likely Trusted. Cert Unknown — Change the certificate's reputation to Unknown. Cert Most Likely Malicious — Change the certificate's reputation to Most Likely Malicious. Cert Known Malicious — Change the certificate's reputation to Known Malicious. Associated Files Details — View files that are signed with the selected certificate. Parent Certificate Details — View information about the parent certificate for the selected certificate. Multiple certificates can share a single parent certificate. Signed Certificates — View the certificates that are signed with the selected certificate. Where Was Certificate Used — View the systems that have used files signed by the certificate. Choose Columns — Specify which columns are displayed in the table. Export Table — Save the certificate information to an external file format. Refresh GTI Reputation — On the Actions menu, select Refresh GTI Reputation to update the reputation value of the selected certificate. Remove — Remove the override and use the certificate's default reputation setting.

Option

Definition

Actions

The following actions are available for the selected certificate.

Cert Known Trusted — Change the certificate's reputation to Known Trusted.

Cert Most Likely Trusted — Change the certificate's reputation to Most Likely Trusted.

Cert Unknown — Change the certificate's reputation to Unknown.

Cert Most Likely Malicious — Change the certificate's reputation to Most Likely Malicious.

Cert Known Malicious — Change the certificate's reputation to Known Malicious.

Associated Files Details — View files that are signed with the selected certificate.

Parent Certificate Details — View information about the parent certificate for the selected certificate. Multiple certificates can share a single parent certificate.

Signed Certificates — View the certificates that are signed with the selected certificate.

Where Was Certificate Used — View the systems that have used files signed by the certificate.

Choose Columns — Specify which columns are displayed in the table.

Export Table — Save the certificate information to an external file format.

Refresh GTI Reputation — On the Actions menu, select Refresh GTI Reputation to update the reputation value of the selected certificate.

Remove — Remove the override and use the certificate's default reputation setting.