Hi Community, I am using ePO 4.0 with VSE 8.7i and I would to have a report of computers still infected. I created one by filtering events with the descprition field containing "failded" or "impossible", the product name "VirusScan" and Event category belonging to malwares. But I m not really convinced that is the right way to do it. Would anyone have different ways to check which computers are still infected?
Thanks in advanceCe message a été modifié par: matteoP on 13/12/10 05:45:57 CST
Attached you will find some queries that should help you. You can import them in your ePO and also put them in a new Dashboard.
Monitoring Threat Sources of last 24 hours (who is spreading malware to your network) and also all of the 'not handled' infections are things that you should review constantly.