The Alerts page displays all of the malicious files that have been submitted to IVX Cloud. It allows you to filter, search, and investigate malicious files in detail. You can also download artifacts collected from the submission, such as screenshots of the detonation and detailed PDF reports. The following table describes the information displayed on the Alerts page:
Column heading | Description |
|---|---|
Source | The third party integration where the alert originated. Click the drop-down menu to filter by integration. Click the 'i' to view extra information about the alert. |
Submitted At | The date and time the alert was submitted. |
Hash | The hash of the alert. To search for a specific hash, enter its value in the search bar under the column heading and press Enter. Click on the hash value to open the analysis report for that alert. |
Type | The type of file that contains the alert. To filter results, enter a file type in the search box under the column heading and press Enter. |
Name | The name of the file submitted for analysis. To search for a specific file, enter its name in the search bar under the column heading and press Enter. Click on the name to open the analysis report for that alert. |
Verdict | Whether the alert is malicious, riskware, or custom riskware. |
Signature | The name of the threat group behind a malicious attack. To view all alerts associated with a threat, enter the signature name in the search box under the column heading and press Enter. |
Artifacts | You can perform the following actions on an alert:
|
Owner | The email address of the person who submitted the alert. To view all alerts submitted by someone, enter their email address in the search bar under the column heading and press enter. |
File ID/Version | The unique ID for a file or URL submitted from a third party integration. |
