The window showing information about a Detection type event contains the following details:
Click the link to display information about the TAA (IOA) rule. If the rule was provided by Kaspersky experts, it contains information about the triggered MITRE technique as well as recommendations for reacting to the event.
The field is displayed if a TAA (IOA) rule was triggered when the event was created.
Clicking the link with the object name opens a list in which you can select one of the following actions:
You can download this data by clicking Save to file.
Clicking the link with the file name or file path opens a list in which you can select one of the following actions:
Run the following tasks:
Clicking the link with the host name opens a list in which you can select one of the following actions:
Run the following tasks:
In the information about the event that Kaspersky Endpoint Security for Linux recorded in the event database, you can click the link with the host name to open a list in which you can select one of the following actions:
In the information about the event that Kaspersky Endpoint Security for Mac recorded in the event database, you can click the links with the file name or file path to open a list in which you can select one of the following actions:
If you are using dynamic IP addresses, the field displays the IP address assigned to the host at the moment when the event was created.
The application does not support IPv6. If you are using IPv6, the IP address of the host is not displayed.
Clicking the MD5 link opens a list in which you can select one of the following actions:
Clicking the SHA256 link opens a list in which you can select one of the following actions: