Malware Scan (Endpoint Security)

Prev Next
CEF:0|trellix|hx|3.5.1|Malware Scan|Malware Scan|10|rt=Jul 04 2017 13:53:53 UTC dvchost=<hx host name>
categoryDeviceGroup=/IDS categoryDeviceType=Malware Protection categoryObject=/Host cs2Label=Scan Type
cs2=<FULL|QUICK|MEMORY> cs3Label=Scan Time Taken in Seconds cs3=<seconds> cs4Label=Infected Objects Count
cs4=<number of infected objects found> cs5Label=Actioned Objects Count cs5=<number of objects for which action
was taken> cs6Label=Scanned Objects Count cs6=<number of scanned objects> cs7Label=Alert Correlaton ID cs7=<hash
of the alert ID> externalId=112 start=Jul 04 2017 13:53:50 UTC categoryOutcome=/<scan outcome>
categorySignificance=/Scan categoryBehavior=/Scan act=Malware Scan msg=Host <hostname> Malware Scan
categoryTupleDescription=Malware Scan was performed on host categoryTechnique=Malware