cancel
Showing results for 
Search instead for 
Did you mean: 
Hioda
Level 7
Report Inappropriate Content
Message 1 of 4

Adaptive Threat Protection: Send information about this file or your decision to your ...

Hello,

I got a question about the Adaptive Threat Protection end user response field when ATP alerting when a file is about to be executed.

The end-user have a text box and an option to send some test to the administrator.

Send information about this file or your decision to your administrator

ATPEndUserResponse.PNG

How can this response text be collected by the administrator? In the ATP User Guide, nothing is explained about this.

BR

3 Replies
McAfee Employee MarkCMc
McAfee Employee
Report Inappropriate Content
Message 2 of 4

Re: Adaptive Threat Protection: Send information about this file or your decision to your ...

That's a good question. You're right it's not documented anywhere that I can find. I have not had time to test it yet but I would assume it would show up somewhere in Reporting/ATP Events. There isn't really anywhere else that ATP would be relevant in EPO.

DavHio
Level 9
Report Inappropriate Content
Message 3 of 4

Re: Adaptive Threat Protection: Send information about this file or your decision to your ...

This would be a very useful feature if someone could find out how to actually use it 🙂 Someone at McAfee should know how to use it... or? 😉

Highlighted
DavHio
Level 9
Report Inappropriate Content
Message 4 of 4

Re: Adaptive Threat Protection: Send information about this file or your decision to your ...

- Create a new query

- Select Events

- Select Adaptive Threat Protection Events

- Next

- Table

- Next

- Add User Prompt Comments

- Next

- Add User Prompt Comments

- Choose Value is not Blank

- Run/Save

 

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator