Displays information about malware objects that have been analyzed.
Syntax
show object-analysis
Parameters
None
Output fields
The following table describes the output fields for the show object-analysis command. Fields are listed in the approximate order in which they appear in the output.
Field | Description |
|---|---|
Total queued submission | Total number of malware submissions that are in the queue waiting to be analyzed from the past 24 hours. |
Total running submissions | Total number of malware submissions that are currently being analyzed from the past 24 hours. |
Total DA running submissions | Total number of dynamic analysis (DA) submissions that are currently running from the past 24 hours. |
Total Objects Submitted | Total number of malware objects that were submitted for analysis. |
Objects Analyzed | Total number of malware objects that have been analyzed. |
Objects identified as Malicious | Total number of malware objects that were detected as malicious. |
Total events | Total number of events that were detected. |
Objects break down by system status | Total number of objects with each system status type. |
Total salvaged object analysis entries | Total number of objects that have been salvaged. |
Example
The following example displays the malware object analysis statistics:
hostname # show object-analysis
Runtime Submission Stats:
Total queued submission : 0
Total running submissions : 0
Total DA running submissions : 0
Total Objects Submitted : 1751
Objects Analyzed : 1751
Objects identified as Malicious : 1628
- VM verified : 1628
- Duplicate to VM verified : 0
- Known checksum match : 47
Total events : 9308
vm-signature-match events : 536
os-change-anomaly events : 3129
checksum-match events : 4641
vm-outbound-comm events : 1002
Objects break down by system status, Total : 1751
Submitted for VM analysis : 1628
VM submit timeout : 123
Total salvaged object analysis entries : 0
User role
Admin, Operator, Monitor, or Analyst
Command mode
Enable
Supported appliances
This command is supported on the following appliance running the specified release or later:
Network Security: Before Release 7.5. The command output was enhanced to display additional statistics about the total number of malware objects that are in the queue waiting to be analyzed, and the total number of malware objects that are currently being analyzed in Release 7.7.