Web UI tabs

Dashboard

Overview of file analysis and appliance status information. See “The Appliance Dashboard” topic in the Malware Analysis System Administration Guide .

Analysis

Filters used to submit malware analysis jobs and expandable levels of detailed information about the hosts that are infected in the network, callback activity, and malware attacks.

Settings

Tabs used to configure appliance and threat management settings:

Date and Time—Set the date and time manually or specify one or more Network Time Protocol (NTP) servers for automatic time synchronization.

User Accounts—Add and modify user accounts, including passwords, role assignments, and local access status, and reset your own password if you are assigned the Admin role.

My Account—Reset your own password, if you are assigned the Monitor, Operator, Analyst, or Operator role.

Email—Configure the appliance email account used for system notifications.

DTI Network—Specify the frequency of security and statistical content uploads.

Notifications—Configure event notifications for analysis alerts, and download the Trellix Management Information Base (MIB) file.

Network—View management interface settings and configure Domain Name Service (DNS) settings.

Malware Analysis—Configure settings for either sandbox or live mode forensic malware analysis.

YARA Rules—Upload YARA rule files to quickly analyze large quantities of files for relevant matches.

Guest Images—View information about the currently loaded guest images (virtual machines) that test traffic and software for malicious activity.

Certificates—Upload SSL certificates.

Appliance Database—Perform appliance database operations.

Login Banner—Configure banner text that is displayed when a user logs in to the appliance CLI and Web UI.

Reports

Filters used to generate and download or schedule consolidated alert details reports, and links to download the schema for operating system changes and alerts.