This procedure describes how to use CLI commands to disable the dropper detection component of static analysis. Dropper detection is enabled by default. You can disable and re-enable dropper detection by using CLI commands only.
Prerequisites
Operator or Admin access
To disable the dropper detection component of static analysis:
Go to CLI configuration mode.
vx-hostname > enable vx-hostname # configure terminal
Disable dropper detection.
vx-hostname (config) # no static-analysis dropper enable
Verify that dropper detection is not enabled.
vx-hostname (config) # show static-analysis config Static Analysis enabled : yes AV-suite enabled : yes AV-suite version : 6 SA on AV-suite whitelist enabled : no AV-check enabled : yes Dropper enabled : no YARA enabled : yes Embedded object extraction enabled : no Embedded URL extraction enabled : yes Max URLs from files to be analyzed : 5 Static info policy : Disable Yara Configuration Yara policy : both Yara customer match limit : 5 ........
Save your changes.
vx-hostname (config) # write memory