1 Reply Latest reply on Jul 31, 2015 7:49 AM by Daniel_S

    Need help on Automatic response

    madamada16

      I want to create an AR that when we encounter 20threats on single computer it will do a scan of machine and alert on email.

       

      any comments and guide.

       

      thanks,

        • 1. Re: Need help on Automatic response
          Daniel_S

          Some approch to your problem:

          -Create new automatic response

          -Event group: Epo notification

          -Event type: threat

           

          Filter:
          Here you would likely take something like:

          Thread Category = Malware or something or

          Threat type = Trojan or something or

          Thread Hanled = True

          what ever you think should trigger the event

           

          For Aggregation you could choose:

           

          On Actions you just configure your mail sending cotaining the details you would like to know and an "Run system command" -> Run client task-> On demand scan for VSE you have to create bevor in ePO.

           

          This should to the trick for you.

           

          Regards

          Dan