show malware priority ＜priority＞

Displays information about malware analysis and malware submission jobs based on priority.

Syntax

show malware priority <priority> [limit <number>]

Parameters

priority

The priority of the malware analysis jobs. The following modes are available:

normal—Displays the results of the analysis jobs with normal priority.

urgent—Displays the results of the analysis jobs with urgent priority.

limit <number>

(Optional) Displays the results for the specified number of malware analysis jobs based on priority. You can display up to 1000 entries.

Output fields

The following table describes the output fields for the show malware priority <priority> command. Fields are listed in the approximate order in which they appear in the output.

Field	Description
Malware ID	Specific malware analysis job number.
Submission ID	Specific malware submission job number.
Analysis Type	Type of malware analysis (sandbox or live) that is associated with the malware submission job number.
URL	Single URL of the malware sample.
Analysis Timeout	Number of seconds after which the malware analysis stops if the analysis is not complete.
Analysis Priority	Priority setting for the current analysis, if you add multiple analysis jobs at the same time to the MVX engine queue.
Force	Force the Malware Analysis appliance to perform the submitted analysis even if it matches a previous submission for which forensic results have been generated.
Profile Name	Guest image profile that the MVX engine uses for the current malware analysis job.
Profile ID	Guest image profile that the MVX engine uses for the current malware analysis job.
Application	Application used to test submitted content.
Md5Sum	Result of the MD5 checksum.
State	Whether the malware submission job has been completed, is in the queue waiting to be analyzed, or is currently running.
Submitted Time	Date and time when the malware analysis job was submitted.
Download Start Time	Start time of the download.
Download End Time	End time of the download.
Run Start Time	Start time of the analysis.
Run End Time	End time of the analysis.
IM	Whether the sample is malicious. The results can be Yes, No, or blank. If the entry is blank, the Malware Analysis appliance cannot confirm a malicious attack. Further forensics might be required.
Number of Events	Number of events identified in the analysis.
Children Malware ID(s)	Specific child malware analysis job number that is associated with the parent malware submission.
Parent Malware ID	Specific parent malware analysis job number that is associated with the child malware submission.

Example

The following example displays the information for one malware analysis job with normal priority:

hostname # show malware priority normal limit 1

Malware ID 608

Submission ID 461

    Analysis Type:         sandbox

    URL:                   8.swf

    Analysis Timeout:      500

    Analysis Priority:     normal

    Force:                 true

    Profile Name:          winxp-sp3

    Profile ID:            43

    Application:           InternetExplorer-7.0

    Md5Sum:                eb02952066726821f810a219817386c9

    State:                 done

    Status:                success

    Submitted Time:        2015-07-27 19:39:33 UTC

    Run Start Time:        2015-07-27 20:54:00 UTC

    Run End Time:          2015-07-27 21:03:00 UTC

    IM:                    YES

    Number of Events:      (null)

    Children Malware ID(s) -

    Parent Malware ID      461

User role

Admin, Operator, Monitor, or Analyst

Command mode

Enable

Supported appliances

This command is supported on the following appliances running the specified releases or later:

Malware Analysis: Release 7.5. The limit option was added and the command output was enhanced to display the statistics about a specific malware submission job in Release 7.7.