Viewing information about the detects of threats

You can enable or disable displaying information about alerts.

Ensure that you add a license key for EDR Optimum to view information about the detects of threats on the endpoint devices.

To enable or disable displaying the Alerts section in the main menu:

1. In the main menu, go to your account settings, and then select Interface options.
2. Enable or disable the Show EDR alerts option.
3. Click Save.

When the option is enabled, the console displays the Alerts subsection in the Monitoring & reporting section of the main menu. In the Alerts subsection, you can view information about the detects of threats on the endpoint devices. Also, you can add a widget that displays information about alerts.

To display detailed information about detected threats in the alert card correctly, you have to install the Kaspersky Endpoint Agent plug-in and the compatible version of the Kaspersky Endpoint Security plug-in (Kaspersky Endpoint Security for Linux 12.1 or later, Kaspersky Endpoint Security for Mac 12.1 or later, or Kaspersky Endpoint Security for Windows 12.6 or later).

Use the Filter menu to filter alerts by date and field values.

The Object type field contains the following values:

• unknown
• Phishing link
• virus
• Trojan
• malicious tool
• backdoor
• worm
• other application
• Adware
• Pornware
• Dangerous packed program
• Dangerous behavior

The Automatic response field contains the following values:

• Malicious object detected
• Object deleted
• Object disinfected
• Object failed to disinfect
• Object moved to Quarantine
• Password-protected archive detected
• Virus detected

See also: Scenario: Monitoring and reporting

Page top