show object-analysis events

Malware ID

Specific malware object analysis job number.

Submission ID

Specific malware submission job number.

Analysis Type

Type of malware analysis (sandbox or live) that is associated with the malware submission job number.

URL

Single URL of the malware sample.

Analysis Timeout

Number of seconds after which the malware analysis stops if the analysis is not complete.

Analysis Priority

Priority setting for the current analysis, if you add multiple analysis jobs at the same time to the MVX engine queue. The default priority is normal.

Force

Force the Network Security appliance to perform the submitted analysis even if it matches a previous submission for which forensic results have been generated.

Profile Name

Guest image profile that the MVX engine uses for the current malware analysis job.

Profile ID

Guest image profile ID number.

Application

Application used to test submitted content.

Md5Sum

Result of the MD5 checksum.

State

Whether the malware submission job has been completed, is in the queue waiting to be analyzed, or is currently running.

Submitted Time

Date and time when the malware analysis job was submitted.

Run Start Time

Start time of the analysis.

Run End Time

End time of the analysis.

IM

Whether the sample is malicious. The results can be Yes, No, or blank. If the entry is blank, the Network Security appliance cannot confirm a malicious attack. Further forensics might be required.

Number of Events

Number of events identified in the analysis.

Children Malware ID(s)

Specific child malware analysis job number that is associated with the parent malware submission.

Parent Malware ID

Specific parent malware analysis job number that is associated with the child malware submission.

Occurrence Time

Time that the event occurred.

Event Type

Type of event that was identified.

Trace ID

Specific trace job number that is associated with a workorder.

Original Malware ID

If a malware sample is a duplicate of an original sample, the duplicate displays the information from the original malware analysis job number.

Source IP

IP address of the source.

Destination IP

IP address of the destination.

Source MAC

MAC address of the source.

Destination MAC

MAC address of the destination.

VLAN ID

Network VLAN job number that is associated with an event.

Attacked Port

Port number that is associated with an attack.

IP Protocol

Type of IP protocol that is used to transport the threat.