Views:

The Object Details tab presents information as a table. It also organizes the objects into the following tabs:

  • Objects: Objects involved in the execution of the matched object, grouped by their parent processes. Click ▶ to expand the list.

  • Noteworthy objects: Objects in the chain that are possibly malicious, based on existing Trend Micro intelligence

  • File events: Objects in the chain that are files

  • Registry events: Objects in the chain that are registry keys, data and entries

  • IP address / DNS events: Objects that are IP addresses or DNS events

The table provides the following details:

Column

Description

Recorded Object

Name of the recorded object.

Click the object name to view more details.

PID

Process ID of the recorded object.

Recorded

Date and time when the object became involved in the chain.

Activity

Action done by the object.

Click the object name to view more details.

Object Reputation

Rating assigned to the object based on Trend Micro intelligence.

Use the following options to manage the table:

  • On the Objects tab, click the filter icon ( ) to filter the table according to the specified criteria.

  • On the Noteworthy Objects, File events, Registry Events, and IP Address / DNS events tabs, sort the table by clicking on the Recorded and Object Reputation columns.