The window displaying information about Document blocked events contains the following details:
Click the link to display information about the TAA (IOA) rule. If the rule was provided by Kaspersky experts, it contains information about the triggered MITRE technique as well as recommendations for reacting to the event.
The field is displayed if a TAA (IOA) rule was triggered when the event was created.
If you are using dynamic IP addresses, the field displays the IP address assigned to the host at the moment when the event was created.
The application does not support IPv6. If you are using IPv6, the IP address of the host is not displayed.
Clicking the link with the file name or file path in the Document blocked section opens a list in which you can select one of the following actions:
Clicking the link with the file name or file path in the Event initiator section opens a list in which you can select one of the following actions:
Clicking the link with the host name opens a list in which you can select one of the following actions:
In the information about the event that Kaspersky Endpoint Security for Linux recorded in the event database, you can click the link with the host name to open a list in which you can select one of the following actions:
Clicking the MD5 link opens a list in which you can select one of the following actions:
Clicking the SHA256 link opens a list in which you can select one of the following actions: