McAfee QUICKCLEAN 1.0 User Manual download pdf (Page 21)

Examples

• If a specific system regularly prompts users, select the system from the list on the TIE module for

VSE Events page. You can then see details about the specific files or certificates that are causing

the prompts. Select individual files or certificates from the Events page and change their reputation

levels to allow or block them so that they no longer generate a prompt.

• If a specific file generates events, select it from the list on the Events page and see on which

systems tried to run it and what action was taken. You can then change the file's reputation so that

it no longer generates events. For example, if the file generates a prompt and you want it blocked,

change its reputation so that it is blocked and does not generate an event.

View details about recent threats

View information about recent files and certificates seen in your environment and the actions taken.

Task

For option definitions, click ? in the interface.

Click Menu | Reporting | TIE module for VSE Events.

The TIE module for VSE Events page shows several views of recent events.

In the Select Event View drop-down list, select the type of events to show.

• Enforcement Events show enforced policy events and the actions taken.

• Observation Events show the observed policy events with no action taken.

Select a chart to see detailed information.

In the Select Pivot Point drop-down list, select how to view events: by certificate, file hash, rule, or

system. Then, select a specific item in the list to see more details.

Using Threat Intelligence Exchange

Monitoring events

McAfee Threat Intelligence Exchange 1.0.0 Product Guide

1 2 ... 16 17 18 19 20 21 22 23 24 25 26 27 28 29

No comments

McAfee QUICKCLEAN 1.0 User Manual Page 21