When PortalProtect detects a file
that matches your blocking or scanning configurations, it executes an action to
protect your SharePoint environment. The type of action it executes depends on the
type of scan it is performing (Real-time, Manual, or Scheduled) and the type of
actions you have configured for that scan. Each time that PortalProtect executes an action, it
logs an event. You can query these log events from the Logs
menu.