Same here. I encoutered this a lot of times and still encountering.
1 of 1 people found this helpful
This is normal, but potentially confusing
The on-access scanner in VSE can be configured to give up if it takes more than a certain time to scan a file. If it does this, it will send a "scan timed out" event back to ePO. There is no threat name associated with this: obviously since the scan did not complete successfully, no specific threat has been identified - so the threat name is show as a hyphen.
However, also because the scan did not complete successfully, we do not know for certain that it is clean: the system is therefore alerting you to a file that is potentially a threat, so that you as the administrator can investigate as necessary.
How you deal with these is your choice: some users investigate files like this and exclude them from scanning if they are satisfied they are benign, some users simply turn off these events in the event filter, some users just ignore them or filter them out of the reports (so that the data is still in the database but doesn't skew their reports.)