Viewing AV-Suite integration using the Web UI

Prev Next

After you have configured the AV-Suite integration feature using the CLI, you can view the results of these interactions using the Malware Analysis Web UI.

Note

You can configure this feature only using the CLI.

Prerequisites

  • An established connection to the Internet

  • A connection to the DTI Cloud

  • Administrator or Operator access to the Malware Analysis appliance

  • AV-Suite integration has been enabled

To view results from AV-Suite integration:

Only events that contain a malicious alert display AV-Suite information.

  1. Navigate to the Malware Analysis page.

  2. Locate an event with Yes in the IM column, which stands for Is Malicious.

    AX_AV-SuiteMalwareAnalysisPage1_scap.png

    The event includes all components that the DTI cloud flagged in the malicious file, including the name of the malware.