McAfee QUICKCLEAN 3.0 User's Guide Page 104
- Page / 140
- Table of contents
- TROUBLESHOOTING
- BOOKMARKS
Rated. / 5. Based on customer reviews
Table 7-5 Column definitions (continued)
Column Definition
Severity
Indicates the severity level of the analyzed sample.
• Information — Indicates that this is a clean file. White-listed files have this
severity level. Corresponds to a severity score of zero.
• Very low — Corresponds to a severity score of 1.
• Low — Corresponds to a severity score of 2.
• Medium — Corresponds to a severity score of 3.
• High — Corresponds to a severity score of 4.
• Very high — Corresponds to a severity score of 5.
File Name
The name of the file that you submitted for analysis.
Analyzer
Profile
The analyzer profile that was referred to for the analysis.
VM Profile
The VM profile used for the dynamic analysis. If only static was used, that is
displayed.
Hash
The MD5 hash value of the file as calculated by McAfee Advanced Threat Defense.
File Size
The size of the analyzed file in KB.
3
Choose to hide the columns that you do not require.
a
Move the mouse over the right corner of a column heading and click the drop-down arrow.
b
Select Columns.
c
Select only the required column names from the list.
You can click a column heading and drag it to the required position.
4
To sort the records based on a particular column name, click the column heading.
You can sort the records in the ascending or descending order. Alternatively, move the mouse over
the right corner of a column heading and click the drop-down arrow. Then select Sort Ascending or Sort
Descending.
View the Analysis Summary report
The Analysis Summary report is an executive brief detailing key behaviors of the sample file. This
report is available in HTML, text, PDF, XML, and JSON formats.
The HTML, text, and PDF formats are mainly for you to review the analysis report. You can access the
HTML and PDF formats from the McAfee Advanced Threat Defense web application. The HTML and text
formats are also available in the reports .zip file for the sample, which you can download to your client
computer.
The XML and JSON formats provide well-known malware behavior tags for high-level programming
script to extract key information. Network Security Platform and McAfee Web Gateway use the JSON
formats to display the report details in their user interfaces.
7
Analyzing malware
View the analysis results
104
McAfee Advanced Threat Defense 3.0.4 Product Guide
- Product Guide 1
- COPYRIGHT 2
- TRADEMARK ATTRIBUTIONS 2
- LICENSE INFORMATION 2
- License Agreement 2
- Contents 3
- 5 Creating analyzer VM 41 4
- 7 Analyzing malware 97 4
- Index 139 5
- About this guide 7
- Find product documentation 8
- Advanced 9
- Malware detection and McAfee 10
- Advanced Threat Defense 10
- Web Gateway 14
- Defense Appliance 17
- Warnings and cautions 19
- Usage restrictions 19
- Unpack the shipment 20
- Check your shipment 20
- Port numbers 24
- Handling the front bezel 27
- Connect the network cable 28
- Defense web application 31
- Viewing user profiles 34
- Add users 35
- Figure 4-3 Add users 36
- Edit Users 37
- Delete Users 38
- Troubleshooting 39
- Delete the analysis results 40
- Creating analyzer VM 41
- • Confirm — Enter cr@cker42 45
- Processor Configuration 47
- Network Type 49
- Select I/O Controller Types 49
- Figure 5-12 Select a disk 50
- Select Write 58
- • Password — Enter cr@cker42 65
- Figure 5-33 Run sigcheck.exe 67
- Figure 5-36 Run MergeIDE 68
- Figure 5-37 Warning message 68
- Figure 5-38 Activate Windows 69
- Figure 5-39 Settings option 70
- Managing VM profiles 74
- View VM profiles 75
- Create VM profiles 76
- Figure 5-51 Shut down the VM 78
- Figure 5-53 79
- Edit VM profiles 80
- Delete VM profiles 80
- View the VM creation log 81
- Defense for malware analysis 83
- Terminologies 84
- Managing analyzer profiles 87
- View analyzer profiles 88
- Create analyzer profiles 89
- Integration with McAfee ePO 91
- Analyzing malware 100
- View the analysis results 102
- Analysis Results section 108
- Analysis Environment section 108
- Operations details section 109
- Disassembly Results 110
- Dropped files report 110
- Logic Path Graph 111
- User API Log 116
- Malware analysis monitors 118
- File Counters 119
- Files analyzed by File Type 119
- Analyzer Profile Usage 120
- Top malware by file name 120
- VM Creation Status monitor 121
- System Information 122
- Threat Defense 123
- CLI syntax 124
- Log on to the CLI 125
- Meaning of "?" 125
- Appliance 125
- List of CLI commands 126
Related products and manuals for Networking McAfee QUICKCLEAN 3.0
(12 pages)© 2020, manymanuals.com. All rights reserved. | 0.226 s |
Manymanuals.com
Manymanuals.de
Manymanuals.fr
Manymanuals.it
Manymanuals.pl
Manymanuals.cz
Manymanuals.es
Manymanuals-pt.com
Comments to this Manuals