1 Reply Latest reply on Jul 31, 2015 7:49 AM by Daniel_S

    Need help on Automatic response


      I want to create an AR that when we encounter 20threats on single computer it will do a scan of machine and alert on email.


      any comments and guide.



        • 1. Re: Need help on Automatic response

          Some approch to your problem:

          -Create new automatic response

          -Event group: Epo notification

          -Event type: threat


          Here you would likely take something like:

          Thread Category = Malware or something or

          Threat type = Trojan or something or

          Thread Hanled = True

          what ever you think should trigger the event


          For Aggregation you could choose:


          On Actions you just configure your mail sending cotaining the details you would like to know and an "Run system command" -> Run client task-> On demand scan for VSE you have to create bevor in ePO.


          This should to the trick for you.