I have just configured my notifications for my new epo 4.5 server and I noticed I have been receiving many notifications for the above Threat Event ID. The detecting product names is McAfee Host Intrusion Prevention and I either get HIPS detected and not handled or Virus detected and not handled. The threat names change all the time also. Anyone have any insight as to this issue. What this ID means? Thank you.
This is an IPS signature trigger event.
Refer to KB65559 for event ID types.
Refer to KB54473 to verify a HIP security event.