lowseveritystatus

Intelligent Sandbox treats severity 1 and 2 samples as low-severity, and severity 3, 4, and 5 as malicious. By default, when you configure dynamic analysis, the dynamic analysis score is displayed in the summary report for all samples. The score also affects the final score for the sample. You can use the lowseveritystatus command to alter the behavior. For example, for low-severity samples that are dynamically analyzed, Intelligent Sandbox does not display the dynamic analysis score in the summary report, or consider the score to compute the final score.

Note

The lowseveritystatus command applies only to non-PE samples, such as Microsoft Word documents and PDF files.

Syntax: lowseveritystatus <show><hide>

Example: lowseveritystatus hide

Parameter	Description
`show`	The default behavior. If a sample is dynamically analyzed, Intelligent Sandbox displays the dynamic analysis score in the report. It also considers the score to compute the final score.
`hide`	Assume that the sample is a non-PE file, which has undergone dynamic analysis. If Intelligent Sandbox detects the file to be low-severity, it does not display the dynamic analysis score in the report (under Sandbox in the Down Selector's Analysis section). Intelligent Sandbox also does not consider the dynamic analysis score for computing the final score. However, the details of the dynamic analysis such as files opened and files created are included in the report. Note The lowseveritystatus hide command affects only the score displayed in the report and does not affect how the results are displayed in the Analysis Reports page.

Parameter

Description

show

The default behavior. If a sample is dynamically analyzed, Intelligent Sandbox displays the dynamic analysis score in the report. It also considers the score to compute the final score.

hide

Assume that the sample is a non-PE file, which has undergone dynamic analysis. If Intelligent Sandbox detects the file to be low-severity, it does not display the dynamic analysis score in the report (under Sandbox in the Down Selector's Analysis section). Intelligent Sandbox also does not consider the dynamic analysis score for computing the final score. However, the details of the dynamic analysis such as files opened and files created are included in the report.

Note

The lowseveritystatus hide command affects only the score displayed in the report and does not affect how the results are displayed in the Analysis Reports page.