Viewing Riskware alert details in the Web UI

Prev Next

In the eAlerts > Riskware page of an File Protect appliance, you can drill down to identify the matched alerts that are detected as non-malicious for a riskware event. The total number of riskware alert entries that include PUP, PUA, adware, or a particular program signature are categorized and tracked on the Riskware page.

The File Protect appliance supports only Riskware Object alerts. This alert indicates that the endpoint (desktop, laptop, tablet, server, or other computer asset) downloaded known riskware.

The following example displays riskware alert entries in the Riskware page.

EX_RiskwareAlerts_scap.png

In the eAlerts > Riskware page, you can drill down from the riskware alert listing. The following example displays the drill-down details of a particular non-malicious alert for a riskware object.

EX_RiskwareAlertsDrill-Down_scap.png

Prerequisites

  • Administrator or Operator access to the File Protect appliance

To view the riskware alert details:
  1. In the Web UI, click the eAlerts tab.

  2. Click the Riskware tab.

  3. To expand an entry, click the gold triangle in the first column.