Viewing information about the detects of threats

You can enable or disable displaying information about alerts.

To enable or disable displaying the Alerts section in the main menu:

1. In the main menu, go to your account settings, and then select Interface options.
2. In the Interface options window that opens, enable or disable the Show EDR alerts option.
3. Click Save.

The console displays the Alerts subsection in the Monitoring & reporting section of the main menu. In the Alerts subsection, you can view information about the detects of threats on the endpoint devices. If you add a license key for EDR Optimum, then Kaspersky Security Center Web Console automatically displays Alerts subsection in the Monitoring & reporting section of the main menu. Also, you can add a widget that displays information about alerts.

To display detailed information about detected threats in the alert card correctly, you have to select the EDR Optimum plug-in from the list of available plug-ins, and then update it. Also, you must install the Kaspersky Endpoint Agent plug-in and the compatible version of the Kaspersky Endpoint Security plug-in (Kaspersky Endpoint Security for Linux 12.1 or later, Kaspersky Endpoint Security for Mac 12.1 or later, or Kaspersky Endpoint Security for Windows 12.6 or later).

Use the Filter menu to filter alerts by date and field values.

The Object type field contains the following values:

• unknown
• Phishing link
• virus
• Trojan
• malicious tool
• backdoor
• worm
• other application
• Adware
• Pornware
• Dangerous packed program
• Dangerous behavior

The Automatic response field contains the following values:

• Malicious object detected
• Object deleted
• Object disinfected
• Object failed to disinfect
• Object moved to Quarantine
• Password-protected archive detected
• Virus detected

See also: Scenario: Monitoring and reporting

Page top