Viewing the table of observables
To view the table of observables:
- Select the Network traffic events section in the application web interface window.
- Go to the Observables tab.
The table of observables is displayed.
The table contains the following information:
- ID is the unique ID of the object.
- Domain is the domain part of the URL from which the file was requested.
The complete URL is displayed in the file information.
- Name is the name of the file.
- MD5 is the MD5 hash of the file.
- SHA256 is the SHA256 hash of the file.
- Source is the IP address of the computer from which the object was sent.
- Destination is the IP address of the computer to which the object was delivered.
- URL reputation is information about the reputation of the URL in the KSN database. Possible values: Trusted, Untrusted.
- Detection represents the file scan results in Kaspersky Anti Targeted Attack Platform. It can have the following values: Detected (identified as malicious), Not detected (identified as safe), Excluded (added to exclusions from scanning by the user or excluded from scanning by the system based on the following criteria: file size less than 100 KB and/or HTML format).
- Protocol is the protocol used to transfer the object.
- Date and time of detection is the time when the object was detected in network traffic.
By default, the data in the table is automatically updated. If you want to freeze the data, set the Update toggle switch to Disabled. If necessary, you can update the data manually by clicking the 
button.
Special considerations involved in displaying items in the table of observables
When viewing the table, take into account the following special considerations involved in displaying the items:
- If the application registers multiples access attempts to the same object, for each case, a separate record is created in the table.
- The maximum number of items that can be displayed in the table is 200.