Viewing the result of the malware scan

After the malware scan is finished, you can view its result in one of the following ways:

• From the alert or incident details
• From a response history
• From a playbook details

To view the result of the malware scan:

1. In the main menu, go to the Monitoring & reporting section, and then do one of the following:
   • If you want to view the result from alert or incident details, go to the Alerts or Incidents section, and then click the ID of the alert or incident for which malware scan was performed. In the window that opens, go to the History tab, and then select the Response history tab to display the list of events.
   • If you want to view the result from a response history, go to the Response history section.
   • If you want to view the result of the malware scan from a playbook, go to the Playbooks section, and then click the name of the playbook for which the malware scan was performed. In the window that opens, go to the History tab to display the list of events.
2. In the Action status column, click the status of the event for which you want to view the results of the malware scan.

   In the window that opens, a table of detections is displayed. In the Administration Server field, you can select the Administration Server for which a table of detections is displayed.

   The table contains the following columns:

   • Device. Device name or ID.
   • Path. Path to the file.
   • Hash. SHA256.
   • Detection name. Name of the detection that occurred on the device.
   • Action status. Threat processing result.
   • User. Account of the user who is associated with the detection.