Provides specific information about the spyware/grayware instances found in HTTP or FTP traffic, such as the managed product that detected the spyware/grayware, the direction of traffic where the spyware/grayware occurs, and the web browser or FTP client that downloaded the spyware/grayware
|
Data |
Description |
|---|---|
|
Received |
The date and time Apex Central received the data from the managed product |
|
Generated |
The date and time the managed product generated the data |
Product Entity/Endpoint |
Depending on the related source:
|
Product |
The name of the managed product or service Example: Apex One, ScanMail for Microsoft Exchange |
Spyware/Grayware |
The name of the security threat |
|
IP |
The IP address of the endpoint |
Source URL |
The URL of the web/FTP site from which the security threat originated |
Traffic/Connection |
The direction of the transmission |
Browser/FTP Client |
The web browser or FTP client that the threat accessed |
User |
The logged on user name at the time of the event |
|
Result |
The result of the action taken by the managed product Example: successful, further action required |
|
Action |
The action taken by the managed product Example: File cleaned, File quarantined, File deleted |
|
Detections |
The total number of detections Example: Apex One detects 10 spyware/grayware instances of the same spyware/grayware on one computer. Detections = 10 |
|
Cloud Service Vendor |
The name of the cloud service vendor |