cancel
Showing results for 
Search instead for 
Did you mean: 

Ways to mark/categorize alerts in threat analyzer as new alerts or persistent

Hi All,

Is there a way for us to tag alerts in the RTTA when its new alerts or not?

If not, do you have any suggestions close to this feature?

TIA,

Philip

3 Replies
jolson
Level 9
Report Inappropriate Content
Message 2 of 4

Re: Ways to mark/categorize alerts in threat analyzer as new alerts or persistent

Hello ,

First of all - welcome to the community.

Second, I'd like to ask why you want this functionality in the Real Time Threat Analyzer - understanding the purpose of this question could help me suggest a solution. Thanks!

Best,

Jesse Olson

Technical Support Engineer

McAfee. Part of Intel Security.

Highlighted

Re: Ways to mark/categorize alerts in threat analyzer as new alerts or persistent

Hi Jesse,

This is to know if the detection has come from the newly updated signature set.

Or i.e. a traffic that wasn't blocked before is suddenly being blocked, we could check the RTTA and see if what's been triggered is new or not. Could belong to an old sigset but was just detected for the first time or a newly added signature.

Regards,

Philip

jolson
Level 9
Report Inappropriate Content
Message 4 of 4

Re: Ways to mark/categorize alerts in threat analyzer as new alerts or persistent

Unfortunately the Real Time Threat Analyzer does not support that functionality. The next best thing is likely the release notes for sigsets - you can sign up for notifications of release notes here.

If this is a function that you'd like to see in a future release of the product, I recommend submitting a Product Enhancement Request.

Best,

Jesse Olson

Technical Support Engineer

McAfee. Part of Intel Security.

More McAfee Tools to Help You
  • Subscription Service Notification (SNS)
  • How-to: Endpoint Removal Tool
  • Support: Endpoint Security
  • eSupport: Policy Orchestrator
  • Community Help Hub

      New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

    • Find Forum FAQs
    • Learn How to Earn Badges
    • Ask for Help
    Go to Community Help

    Join the Community

      Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

    • Get helpful solutions from McAfee experts.
    • Stay connected to product conversations that matter to you.
    • Participate in product groups led by McAfee employees.
    Join the Community
    Join the Community