Hi Everyone,

I am in the process of revising our procedures on how to deal with AV alerts, which is to be rolled out to our first level support. 

When an alert notification is generated, it would be good to know all possible vriables which may appear in the 'Action Source' column.

Does anyone know where I can find such a list ?

So far, I haven't find anything in the official docco, or on this forum, or anywhere else for that matter.

There shouldn't be too many variables for this column, but I am keen to cater for all possible outcomes.

Values I have seen so far include 'Cleaned by deletion', 'Left-Alone'  and 'Quarantined' but I know there must be a few more than this.

Help appreciated.

Thanks.