McAfee QUICKCLEAN 3.0 User's Guide Page 101
- Page / 140
- Table of contents
- TROUBLESHOOTING
- BOOKMARKS
Rated. / 5. Based on customer reviews
b
Set the frequency at which the Analysis Status page must refresh itself.
The default refresh interval is 1 minute.
c
To refresh the Analysis Status page now, click .
3
4
Filter the displayed records to locate the required ones.
Table 7-3 Filtering options
Option Definition
Search
Specify the parameter that you want to use to filter the records. Click Search and
select one or more of the following parameters:
• File Name: Select if you want to filter based on the starting characters of the file
name. For example, if you select this option and enter cal as the search string then
the status for files names that start with cal are listed.
• MD5: Select if you want to filter based on the starting characters of the MD5 hash
value.
• Status: Select if you want to filter based on the status - Waiting, Analyzing, or
Completed.
Enter the search string in the adjacent text box.
Case Sensitive
Select if you want to make the search case sensitive.
Suppose that you have selected File Name and Status as the criteria, selected Case Sensitive, and
specified Com. All the records in the completed state and file names starting with the characters
Com are listed.
Table 7-4 Column definitions
Column Definition
Submitted Time
The time stamp when the file was submitted for analysis.
User
The log on name of the user who submitted the file for analysis.
Status
The current status of analysis.
• Waiting — Typically, this indicates that McAfee Advanced Threat Defense is waiting
for an analyzer VM to dynamically analyze the file.
• Analyzing — Indicates that the analysis is still in progress.
• Completed — Indicates that the analysis is complete for the file. Double-click the
record to see the complete report.
File Name
The name of the file that you submitted for analysis.
VM Profile
The VM profile used for dynamic analysis. If the file was analyzed only by a static
method, that is displayed.
Analyzer Profile
The analyzer profile that was referred to for the analysis. If the file was analyzed
only by a static method, that is displayed.
MD5
The MD5 hash value of the file as calculated by McAfee Advanced Threat Defense.
File Type
The file type of the sample, such as binary.
Analyzing malware
Monitor the status of malware analysis
7
McAfee Advanced Threat Defense 3.0.4 Product Guide
101
- Product Guide 1
- COPYRIGHT 2
- TRADEMARK ATTRIBUTIONS 2
- LICENSE INFORMATION 2
- License Agreement 2
- Contents 3
- 5 Creating analyzer VM 41 4
- 7 Analyzing malware 97 4
- Index 139 5
- About this guide 7
- Find product documentation 8
- Advanced 9
- Malware detection and McAfee 10
- Advanced Threat Defense 10
- Web Gateway 14
- Defense Appliance 17
- Warnings and cautions 19
- Usage restrictions 19
- Unpack the shipment 20
- Check your shipment 20
- Port numbers 24
- Handling the front bezel 27
- Connect the network cable 28
- Defense web application 31
- Viewing user profiles 34
- Add users 35
- Figure 4-3 Add users 36
- Edit Users 37
- Delete Users 38
- Troubleshooting 39
- Delete the analysis results 40
- Creating analyzer VM 41
- • Confirm — Enter cr@cker42 45
- Processor Configuration 47
- Network Type 49
- Select I/O Controller Types 49
- Figure 5-12 Select a disk 50
- Select Write 58
- • Password — Enter cr@cker42 65
- Figure 5-33 Run sigcheck.exe 67
- Figure 5-36 Run MergeIDE 68
- Figure 5-37 Warning message 68
- Figure 5-38 Activate Windows 69
- Figure 5-39 Settings option 70
- Managing VM profiles 74
- View VM profiles 75
- Create VM profiles 76
- Figure 5-51 Shut down the VM 78
- Figure 5-53 79
- Edit VM profiles 80
- Delete VM profiles 80
- View the VM creation log 81
- Defense for malware analysis 83
- Terminologies 84
- Managing analyzer profiles 87
- View analyzer profiles 88
- Create analyzer profiles 89
- Integration with McAfee ePO 91
- Analyzing malware 100
- View the analysis results 102
- Analysis Results section 108
- Analysis Environment section 108
- Operations details section 109
- Disassembly Results 110
- Dropped files report 110
- Logic Path Graph 111
- User API Log 116
- Malware analysis monitors 118
- File Counters 119
- Files analyzed by File Type 119
- Analyzer Profile Usage 120
- Top malware by file name 120
- VM Creation Status monitor 121
- System Information 122
- Threat Defense 123
- CLI syntax 124
- Log on to the CLI 125
- Meaning of "?" 125
- Appliance 125
- List of CLI commands 126
Related products and manuals for Networking McAfee QUICKCLEAN 3.0
(12 pages)© 2020, manymanuals.com. All rights reserved. | 2.442 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comments to this Manuals