cancel
Showing results for 
Search instead for 
Did you mean: 

How to get a report of computers still infected?

Hi Community, I am using ePO 4.0 with VSE 8.7i and I would to have a report of computers still infected. I created one by filtering events with the descprition field containing "failded" or "impossible", the product name "VirusScan" and Event category belonging to malwares. But I m not really convinced that is the right way to do it. Would anyone have different ways to check which computers are still infected?

Thanks in advance

Ce message a été modifié par: matteoP on 13/12/10 05:45:57 CST
4 Replies
jj4sec
Level 9
Report Inappropriate Content
Message 2 of 5

Re: How to get a report of computers still infected?

use the "threat handled" parameter and select "equals" "false"

Re: How to get a report of computers still infected?

Thanks for your answer

Re: How to get a report of computers still infected?

Hello,

Attached you will find some queries that should help you. You can import them in your ePO and also put them in a new Dashboard.

Monitoring Threat Sources of last 24 hours (who is spreading malware to your network) and also all of the 'not handled' infections are things that you should review constantly.

Regards,

Bruno

Nielsb
Level 11
Report Inappropriate Content
Message 5 of 5

Re: How to get a report of computers still infected?

Thanks for your queries.

And is it possible to run a query on a specific container in the System Tree?

For example on "Country A", or "Country B"