Malware analysis monitors

Prev Next

The following are the monitors related to malware analysis.

File Counters

This monitor shows the analysis status for files submitted during the specified time period. For example, if you set the time period for the data in the dashboard as last 5 minutes, this monitor shows the count of files in completed, analyzing, and waiting statuses since the last 5 minutes. If you view this monitor in the stacked bar chart format, it also displays the severity level for the files.

  • The severity levels are indicated using various colors.

  • To hide the files for a particular severity, click the corresponding severity in the legend. For example, if you want to focus on only the malicious files, click Not Malicious and Not Rated in the legend. Now the chart shows only the high-severity malware that is in the waiting, running, and completed statuses. Click again on Not Malicious and Not Rated to view the combined chart.

  • Move the mouse over a particular block in the chart to view the number of files that make up that block.

Top 10 File Types by Volume

Note

This monitor has drill - down capabilties. Once you click the mouse over a particular block, Intelligent Sandbox takes you to Analysis Results page, displaying the records sorted as per the chosen block.

This monitor shows the count of top 10 file types based on their volume. In the tabular format, it shows the percentage for each type. In the chart, it also shows the count of malicious, not malicious and not rated files.

  • The malicious, not malicious and not rated file counts are indicated using different colors.

  • To hide the malicious or not malicious files, click the corresponding severity level in the legend.

  • Move the mouse over a particular block in the chart to view the number of files that make up that block.

Note

This monitor has drill - down capabilties. Once you click the mouse over a particular block, Intelligent Sandbox takes you to Analysis Results page, displaying the records sorted as per the chosen block.

Profile Usage

This monitor shows the number of times each analyzer profile has been used for analyzing files.

Top 5 Recent Malware by File Name

In this monitor, you can view the names of five malicious files detected in your network with the most severe ones listed on top. This information might enable further research such as finding more information about these files on the web.

  • The listed malware files are sorted based on their severity level in the descending order.

  • The first column displays the file names. The second column displays the severity level.

Top 10 Malware by Threat Name

In this monitor, you can view the names of ten most severe malware files in your network by threat name.

Note

This monitor has drill - down capabilties. Once you click the mouse over a particular block, Intelligent Sandbox takes you to Analysis Results page, displaying the records sorted as per the chosen block.

Files Analyzed by Engine

In this monitor, you can view the severity and number of files analyzed by GAM, GTI and Sandbox.

Note

This monitor has drill - down capabilties. Once you click the mouse over a particular block, Intelligent Sandbox takes you to Analysis Results page, displaying the records sorted as per the chosen block.

Top 5 URLs Analyzed by GTI

In this monitor, you can view the names of five most severe URLs being analyzed by GTI. This information might enable further research such as finding more information about these files on the web.

  • The listed malware files are sorted based on their severity level in the descending order.

  • The first column displays the file names. The second column displays the severity level.

Top 5 URLs

In this monitor, you can view the names of five malicious files detected in your network with the most severe ones listed on top. This information might enable further research such as finding more information about these files on the web.

  • The listed malware files are sorted based on their severity level in the descending order.

  • The first column displays the file names. The second column displays the severity level.