Configuring Retro Scan Detections Notifications Parent topic

Deep Discovery Inspector can send this notification when Retro Scan detects historical callback attempts to C&C servers in the Trend Micro Global Intelligence List.

Procedure

  1. Go to Administration → Notifications → Retro Scan Detections.
    The Retro Scan Detections screen appears.
  2. Select Notify Administrator if Retro Scan detects previous callback attempts to known C&C servers.
  3. Specify a sending interval.
    Select a value between one and 30 days.
    Tip
    Tip
    Trend Micro recommends using the default settings.
  4. (Optional) Configure the notification recipients.
    For details, see Configuring Email Notification Settings.
  5. (Optional) Modify the default message content.
    1. Type a subject that does not exceed 256 characters.
    2. Type message content that does not exceed 4,096 characters.
      Use any of the following message tokens to customize the notification template.
      Message Token
      Description
      __HTTPURL__
      Deep Discovery Inspector management console URL
      __RETRO_SCAN_COMPROMISED_HOST_NUM__
      Number of compromised hosts
      __RETRO_SCAN_C_AND_C_CALLBACK_NUM__
      Number of C&C callback attempts found
      __TIMESTAMP__
      Retro Scan report run date and time
  6. Click Save.