Views:

You can view a comprehensive report for each Predictive Machine Learning log detection by clicking the Predictive Machine Learning Log Details link on the Policy Event Details screen.

The Predictive Machine Learning Log Details screen consists of two sections:

  • Top banner: Specific details related to this particular log detection

  • Bottom tab controls: Details related to the Predictive Machine Learning threat, including threat probability scores and file information

The following table discusses the information provided in the top banner.

Table 1. Log Details - Top Banner

Section

Description

Detection name

Indicates the name of the Predictive Machine Learning detection

Example: Ransom.Win32.TRX.XXPE1

Detection time / Action

Indicates when this specific log detection occurred and the action taken on the threat

File name

Indicates the name of the file that triggered the detection

Recipient

Displays the recipient of the email message that triggered the detection

The following table discusses the information provided on the bottom tabs.

Table 2. Log Details - Tab Information

Tab

Description

Threat Indicators

Provides the results of the Predictive Machine Learning analysis

  • Threat Probability: Indicates how closely the file matched the malware model

  • Probable Threat Type: Indicates the most likely type of threat contained in the file after Predictive Machine Learning compared the analysis to other known threats

  • Similar Known Threats: Provides a list of known threat types that exhibit similar file features to the detection

File Details

Provides general details about the file properties for this specific detection log