Searching for alerts in IOC scan results

To find and view scan results for the selected IOC file:

1. In the window of the program web interface, select the User rules section, IOC subsection.

   This opens the table of IOC files.

2. Select the IOC file for which you want to view scan results.

   This opens a window containing information about the IOC file.

3. Go to the alert database by clicking Find alerts.

   The alert table is opened in a new browser tab.

You can also view scan results for all IOC files by filtering alerts by technology name.

See also Managing user-defined IOC rules Viewing the table of IOC files Viewing information about an IOC file Uploading an IOC file Downloading an IOC file to a computer Enabling and disabling the automatic use of an IOC file when scanning hosts Deleting an IOC file Searching for alerts using an IOC file Filtering and searching IOC files Clearing an IOC file filter Configuring an IOC scan schedule

Page top