Views:

Provides specific information about the virus/malware detections on your network, such as the managed product that detected the viruses/malware, the name of the virus/malware, and the infected endpoint

Table 1. Detailed Virus/Malware Information Data View

Data

Description

Received

The date and time Apex Central received the data from the managed product

Generated

The date and time the managed product generated the data

Product Entity/Endpoint

Depending on the related source:

  • The display name of the managed product server in Apex Central

  • The name or IP address of the endpoint

Product

The name of the managed product or service

Example: Apex One, ScanMail for Microsoft Exchange

Product/Endpoint IP

Depending on the related source:

  • The IP address of the managed product server

  • The IP address of the endpoint

Product/Endpoint MAC

Depending on the related source:

  • The MAC address of the managed product server

  • The MAC address of the Security Agent endpoint

Managing Server Entity

The display name of the managed product server in Apex Central to which the endpoint reports

Domain

The domain of the managed product server to which the endpoint reports

Virus/Malware

The name of the security threat

Endpoint Infection Channel

The channel that the threat originated from

Endpoint

The name or IP address of the endpoint

Source Host

The IP address or name of the endpoint from which the security threat originated

User

The logged on user name at the time of the event

Result

The result of the action taken by the managed product

Action

The action taken by the managed product

Detections

The total number of detections

Example: Apex One detects 10 virus instances of the same virus on one computer.

Detections = 10

Entry Type

The entry point of the security threat

Detailed Information

A link that displays additional information about the specific detection

Apex One Domain Hierarchy

The agent tree domain or subdomain to which the Security Agent belongs

Department

The Active Directory department to which the endpoint belongs

Operating System

The operating system on the endpoint

Pattern/Rule

The pattern or rule that triggered the detection

Pattern/Rule Version

The version of the pattern or rule that triggered the detection

Cloud Service Vendor

The name of the cloud service vendor

File

The name of the file object or the program that executed the process

File Path

The path of the file object or the path of the program that executed the process