Displays the workorder information for all malware submissions. The malware submission jobs are listed in ascending order by submission ID.
Syntax
show workorders allParameters
None
Output fields
The following table describes the output fields for the show workorders all command. Fields are listed in the approximate order in which they appear in the output.
Field | Description |
|---|---|
Submission ID | Specific malware submission job number. |
Incident ID | Specific confirmed incident job number. |
Malware ID | Specific malware analysis job number. |
Source IpAddress | IP address of the source. |
Destination IpAddress | IP address of the destination. |
File type | File type that is associated with the malware submission job. |
Status | Whether the analysis succeeded or failed. |
Malicious | Whether the malware submission was detected as malicious. |
Analysis Object ID | Analysis object job number that is associated with the malware submission. |
Analysis Object Name | Analysis object name that is associated with the malware submission job. |
Analysis File Type | Analysis file type that is associated with the malware submission job. |
Dynamic Analysis weight | Weight that is assigned to a dynamic analysis job on a particular object. |
Dynamic Analysis jobs | Number of dynamic analysis jobs that have been processed on a particular object. |
Job ID | Job number that is associated with the malware submission. |
OS Name | Guest image profile. |
Application name | Application used to test the content. |
OS Changes weight | Weight assigned based on a correlation between a set of rules and a set of operating system (OS) change activities detected by the virtual machine (VM) during dynamic analysis. |
CNC Match weight | Weight that is assigned by a custom rule that is used for callback detection on a VM during dynamic analysis. |
Assigned time | Timestamp generated when the malware submission started the detection operation on a VM. |
Complete time | Timestamp generated when the malware submission completed the detection operation on a VM. |
Job runtime | Time needed to complete the malware submission job. |
Examples
The following example displays partial ouput of the workorder information for all malware submissions:
hostname # show workorders all
Submission ID: 27092
Malware ID : 18586
Source IpAddress : 128.120.179.161
Destination IpAddress : 183.62.114.139
File type : zip
Status : submission_duplicate
Original ID : 25861
Malicious : NO
Submission ID: 27093
Source IpAddress : 128.120.179.161
Destination IpAddress : 183.57.148.149
File type : zip
Status : queued
Submission ID: 27094
Incident ID : 27094
Source IpAddress : 121.185.58.215
Destination IpAddress : 57.185.10.245
File type : url
Status : success
Malicious : YES
Analysis Object ID : 20623
Analysis Object Name : http://virgin-altantic.net/news/ask-index.php
Analysis File Type : url
Dynamic Analysis weight : 300
Dynamic Analysis jobs : 2
Job ID : 24253
OS name : win7-sp1
Application name : InternetExplorer 9.0
OS Changes weight : 100
CNC Match weight : 0
Assigned time : 2015-10-30 15:56:57.80557
Complete time : 2015-10-30 15:57:32.91094
Job runtime : 00:00:35.10537
Job ID : 24254
OS name : winxp-sp3
Application name : InternetExplorer 8.0
OS Changes weight : 300
CNC Match weight : 0
Assigned time : 2015-10-30 15:56:57.809846
Complete time : 2015-10-30 16:00:16.754813
Job runtime : 00:03:18.944967
User role
Admin, Monitor, or Analyst.
Command mode
Enable
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Network Security: Before Release 7.5. The command output was enhanced to display the statistics about a specific malware submission job in Release 7.7.