Endpoint Protection

 View Only

  • 1.  Anybody knows of a schema in querying infected desktop in DB?

    Posted Mar 08, 2014 03:21 PM

    Anybody knows of a schema in querying infected desktop in DB? I have stumbled in this article https://www-secure.symantec.com/connect/articles/compilation-sql-queries-sepm-database but doesnt have the sql query that I need. 

    I am running SEP 11.X

     

     

     



  • 2.  RE: Anybody knows of a schema in querying infected desktop in DB?

    Posted Mar 08, 2014 04:37 PM

    You can use this 11.x db schema doc to create the query you need:

    http://www.symantec.com/docs/DOC4935



  • 3.  RE: Anybody knows of a schema in querying infected desktop in DB?

    Posted Mar 08, 2014 11:58 PM
    Dont know why you want to query the DB when there aleady a ready made repor for this
    monitors -logs - computer status
    click on advanced ( blue link)
    click on compliance
    check infected only
     this will give you all the infected machines
     
    if you still want to query the DB these info are stored in SEM_Agent table
     
    select * from SEM_Agent  where ( Infected=1)