Endpoint Protection

 View Only

  • 1.  SEP risk information

    Posted Nov 19, 2014 04:20 AM

    Hi All,

    Inside the Detailed Event Information (risk log extraction -> detail), what is the difference between the informations "Download site" and "Downloaded or created by"? What describe these fields?

    risk info.png

    Thanks

     



  • 2.  RE: SEP risk information

    Posted Nov 19, 2014 04:35 AM

    Hi VoCa,

    "Download site" is where the file came from- a URL, for instance, if Internet Explorere downlaoded the threat in a drive-by download.

    "Downloaded or created by" is the application/process which intiiated the download.

    Hope this helps!

     

    With thanks and best regards,

    Mick



  • 3.  RE: SEP risk information

    Posted Nov 19, 2014 06:14 AM

    This should be self-explanatory

    SIte is where it came from, downloaded or created by is the process that downloaded it.