The Object Details tab presents information as a table. It also organizes the objects into the following tabs:
-
Objects: Objects involved in the execution of the matched object, grouped by their parent processes. Click ▶ to expand the list.
-
Noteworthy objects: Objects in the chain that are possibly malicious, based on existing Trend Micro intelligence
-
File events: Objects in the chain that are files
-
Registry events: Objects in the chain that are registry keys, data and entries
-
IP address / DNS events: Objects that are IP addresses or DNS events
The table provides the following details:
Column |
Description |
---|---|
Recorded Object |
Name of the recorded object. Click the object name to view more details. |
PID |
Process ID of the recorded object. |
Recorded |
Date and time when the object became involved in the chain. |
Activity |
Action done by the object. Click the object name to view more details. |
Object Reputation |
Rating assigned to the object based on Trend Micro intelligence. |
Use the following options to manage the table:
-
On the Objects tab, click the filter icon (
) to filter the table according to the specified criteria.
-
On the Noteworthy Objects, File events, Registry Events, and IP Address / DNS events tabs, sort the table by clicking on the Recorded and Object Reputation columns.