Retro Scan Detections Notifications Parent topic

Deep Discovery Inspector can send notifications when Retro Scan detects historical callback attempts to C&C servers included in the Trend Micro Global Intelligence List.

Procedure

  1. Go to Administration → Notifications → Notification Settings → Retro Scan Detections.
  2. Select Notify Administrator if Retro Scan detects previous callback attempts to known C&C servers.
  3. Specify a sending interval.
    Select a value between one and 30 days.
    Tip
    Tip
    Trend Micro recommends using the default settings.
  4. (Optional) Configure the notification recipients.
    For details, see Configuring Email Notification Settings.
  5. (Optional) Modify the default subject and message body.
    Note
    Note
    • The message body cannot exceed 4,096 characters.
    • The message subject cannot exceed 256 characters.
    You can use any of the following message tokens when customizing the notification.
    Message Token
    Description
    __HTTPURL__
    Deep Discovery Inspector management console URL
    __RETRO_SCAN_COMPROMISED_HOST_NUM__
    Number of compromised hosts
    __RETRO_SCAN_C_AND_C_CALLBACK_NUM__
    Number of C&C callback attempts found
    __TIMESTAMP__
    Retro Scan report run date and time
  6. Click Save.