Searching for Files

Search domains, groups or agents for detected files and collect files.

From File Search, you can:

• Search for detected files
• Collect searched files

Note

Select the period - Last 24 hours, Last 48 hours, Last 7 days, Last 14 days, Last 30 days or User-defined - on the top right. In User-defined, click the calendar icon ( ) to specify the date and clock icon () to specify the time.

Check Files

Search for files with the same hash value as the files detected on groups or agents as below:

1. Click Response on the top.
2. Click the File Search tab.
3. Check the searched files. Select a search condition (Searching, Complete, Failed or No file) or enter a search keyword to search for a file.

• Total: The total number of searched files.
• Collect Files: Collect selected files from the server. Select the files to collect and click Collect Files ( ) or Collect Files on the top.
• Status: The file's search status - Searching, Complete, Failed or No file.
• Search Conditions: File search conditions.
• File Name: The file name to search.
• File Hash: The file hash value to search. Hash value is the MD5 value.
• File Size (bytes): The file size to search.
• File Created: The creation date of the file to search.
• File Modified: The modification date of the file to search.
• Search Target: The target to search the file from - agent's IP address or group name.
• Search Start Time: The file search start time.

4. To check the details on the agent with the file, click the file.
5. In <Agent with the file>, check the agent details.

• Search Target: The number of agents with the file.
• Agent IP Address: The IP address of the agent with the file. If the agent service is running, the icon will be green (), and if not, it will be in red ().
• Computer Name: The computer name set on the agent's Windows system.
• User Name: The agent's user name.
• File Name: The searched file name.
• File Hash: The searched file hash value. Hash value is the MD5 value.
• File Size (bytes): The searched file size.
• File Created: The searched file creation date.
• File Modified: The searched file modification date.

6. Click OK.

Note

File Search supports complete scan.

Search for Files

To search for files:

1. Click Response on the top.
2. Click the File Search tab.
3. Select a search condition (Searching, Complete, Failed or No file) or enter a search keyword and click Search.

4. To check the files by period, specify the period on the right.

5. Check the result on the list.