Enabling and disabling the automatic use of an IOC file when scanning events

You can enable or disable the automatic use of an IOC file when scanning events.

To enable or disable the automatic use of an IOC file when scanning events:

1. In the program web interface window, select the IOC/IOA Analysis section, IOC Scanner subsection.

   The table of IOC files opens.

2. In the line containing the IOC file whose use you want to enable or disable, in the Autoscan column, set the toggle switch to one of the following positions:
   • Enabled
   • Disabled
3. Click the Save button.

Automatic use of an IOC file when scanning events will be enabled or disabled.

See also IOC scan of events Viewing the table of IOC files Viewing information about an IOC file Uploading an IOC file Downloading an IOC file to a computer Deleting an IOC file Searching IOC scan results Filtering and searching IOC files Clearing an IOC file filter Configuring an IOC scan schedule Supported OpenIOC Indicators of Compromise

Page top