Agent

Check the details on agents where suspicious behavior was detected - No. of Malicious Files, No. of Suspicious Behaviors, Malware Name, Recent Suspicious Behavior and Detection Time. Click the detected agent to go to the details page.

 From Agent, you can:

• Check detected agents
• Go to the detected agent details page

Check detected agents

Check the information on the agents where suspicious behavior has been detected. Select a detected agent and execute Block Network, Collect AhnReport and Collect Artifact command, or specify the period to search for infected agents. To view infected agents:

1. On the top of the web page, click Detection.
2. From the menu, select Detection > Agent.
3. Specify the period to search for an agent or search for a specific agent using the agent ID and malware name. Select or click an agent to check the details - Detailed Agent Information.

• Detected Agent: The IP address and computer name of the detected agent.
• No. of Malicious Files: The number of malicious files detected in the agent.
• No. of Suspicious Behaviors: The number of suspicious behaviors detected in the agent.
• Malware Name: The most recently detected malware.
• Recent Suspicious Behavior: The most recently detected suspicious behavior.
• Infection Time: The agent infection time.

Search

To search for a specific agent, enter the Agent Information and click the Search icon.

Period

Select the period to check the infected agent information - Last 24 hours, Last 48 hours, Last 7 days, Last 14 days or Last 30 days - or click User-defined to specify the period.

Export

Select Export on the bottom of the page to save the information in csv, xlsx or pdf format.

Respond

Block the network or collect information from infected agents.

• Block Network: Block network of infected agent.
• Collect AhnReport: Collect AhnReport from infected agent.
• Collect Artifact: Collect Artifact from infected agent.