Antivirus Detected an Infected File

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Content Index


Monitors CTERA platform to detect files infected with viruses identified by the antivirus engine on Edge Filers.

Attribute Value
Type Analytic Rule
Solution CTERA
ID 4f767afa-d666-4ed4-b453-a4f5ad35181b
Severity High
Status Available
Kind NRT
Tactics Impact
Techniques T1203
Required Connectors CTERA
Source View on GitHub

Tables Used

This content item queries data from the following tables:

Table Selection Criteria Transformations Ingestion API Lake-Only
Syslog SyslogMessage contains "found an infected file" ?

Browse: 🏠 · Solutions · Connectors · Methods · Tables · Content · Parsers · ASIM Parsers · ASIM Products · 📊

Back to Analytic Rules · Back to CTERA