Displays the statistics about the total number of malware objects that were analyzed.
This command displays cumulative statistics such as the total number of malware objects that are in the queue waiting to be analyzed, total number of malware objects that are currently running, total number of malware objects that were submitted for analysis, and the total number of events that were detected. It also shows the total number of objects with each system status type.
For more information, refer to the Malware Analysis User Guide.
Syntax
show malware
Parameters
None
Output fields
The following table describes the output fields for the show malware command. Fields are listed in the approximate order in which they appear in the output.
Field | Description |
|---|---|
Total Objects Submitted | Total number of malware objects that were submitted for analysis. |
Objects Queued | Total number of malware objects that are in the queue waiting to be analyzed. |
Objects Running | Total number of malware objects that are currently being analyzed. |
Objects Analyzed | Total number of malware objects that have been analyzed. |
Objects identified as Malicious | Total number of malware objects that were detected as malicious. |
Total events | Total number of events that were detected. |
Objects break down by system status | Total number of objects with each system status type. |
Example
The following example displays the malware analysis statistics:
hostname # show malware
Total Objects Submitted : 1337
Objects Queued : 10
Objects Running : 2
Objects Analyzed : 1325
Objects identified as Malicious : 1084
- VM verified : 1084
- Duplicate to VM verified : 0
- Known checksum match : 1
Total events : 5237
vm-signature-match events : 585
os-change-anomaly events : 1280
checksum-match events : 2978
vm-outbound-comm events : 394
Objects break down by system status, Total : 1337
Submitted for VM analysis : 1268
Submit Disabled : 3
Invalid : 55
Static Analysis Only : 11
User role
Admin, Operator, Monitor, or Analyst
Command mode
Enable
Supported appliances
This command is supported on the following appliance running the specified release or later:
Malware Analysis: Release 7.5. The command output was enhanced to display additional statistics about the total number of malware objects that are in the queue waiting to be analyzed, and the total number of malware objects that are currently being analyzed in Release 7.7.