Endpoint Protection

 View Only

  • 1.  SEP Report Queries

    Posted Oct 26, 2014 07:38 AM

    HI guys,

    I need to extract data for a report with fields mentioned below. Can anyone please share the SEP report or SQL query to extract that information.

    Computer Name

    Domain Name

    IP

    Threat Type

    Threat Name

    Full File Path

    First Detected At

    HELPDESK1

    SABICCORP

    10.70.21.51

    Adware or PUA

    NirSoft

    D:\Software_Library\Folder\Install\IE_PassView_V1.09.rar\IE PassView V1.09\IE PassView V1.09\iepv.exe

    8/14/2014

    Regards,

     



  • 2.  RE: SEP Report Queries

    Posted Oct 26, 2014 09:39 AM

    Run the Risk report to get this info.

    You can also check thru the many SQL queries available:

    https://www-secure.symantec.com/connect/forums/sql-querys-database

    Compilation of SQL queries to the SEPM database

    https://www-secure.symantec.com/connect/articles/compilation-sql-queries-sepm-database



  • 3.  RE: SEP Report Queries

    Posted Oct 27, 2014 01:56 AM

    Thanks Brian.

    I have seen those URL but I am not very good at SQL queries. I have database schema with me but need to have a query with something like join statement to extract data from multiple tables in single query.