Select an indicator from Threat Expanded View to view details.
Item
Description
Details
View the details of the IoC:
SHA256
SHA1
MD5
File Size
First Seen
Classification Name
Classification Type
Static Similarity
Where a file has not been identified as clean or malicious, but its static properties resemble a known threat, Trellix Insights displays a similarity.
Trellix Insights displays the list of top matches, with a match percentage in a linear graph.
For each match, file hashes can be selected in the drop down menu, and the following details are displayed:
Threats associated with the file hash
A description of similarity, by providing details of matches in groups of static attributes in the PE header
Global Prevalence
View a list of countries and sectors with impacted devices and a color-coded map. Global prevalence is based on the number of detections in the last 7 days.
Infection Comparison
View an interactive infection comparison based on the number of devices affected in your organization, the selected business sector, selected country, and globally.
A red dot indicates affected devices. Hover over the dot to see the number of infections compared to the total number of devices.
The size of the dot indicates the proportion of affected devices to the total number of devices.
Sector and Country show the number of infections per million devices.
Product Distribution
View the detection distribution for the campaign or IoC grouped by Trellix products:
By Products - Distribution of detection of Trellix products.
ENS Scanners - Distribution of ENS Scanners, for example, JCM and AVSCAN.