Endpoint Protection

When I see the scan logs for all clients  in Monitors>Logs  I am unable to find which is admin scheduled scan, which is manual scan and which is auto protect scan . as some scans are starting at different time which i have scheduled fromSEPM and also some scans have completed withing few miw minutes which can never be a full scan.


Do any one knows how to differentiate these.

one thing more what is that scan id shown in that report. what does that number mean.
        

HI,
even i'm having difficult to find the type of scan. The higher the time taken we can asume it as scheduled scan or manual scan. Since you know the scheduled scan timing, it is easier to differentiate between scheduled scan and manual scan (based on time), however it is also diffiult, as client would have missed the scheduled scan and triggered at some other time.
The scan which hardly ends in couple of minutes scanning few thousands are scan intitiated when the new definition have been installed on client machine.
Pete!