ActionTaken field in ThreatEvents table

HI,

Have a look in the Enumerations table, this is what the SRI uses.

SRI info:

/search?q= 8285

http://www.sophos.com/en-us/medialibrary/PDFs/documentation/sri_51_ugeng.pdf

Regards,

Jak

Thanks. I looked at both the links you provided but even though it indicates all fields in the ThreatEvents table, it doesn't show me all the possible values for the field ActionTaken

Did you look in the Enumerations table?  This exists in the SOPHOS51 database (SEC 5.1) by default, prior to that you had to install the SRI to get it.

Regards,

Jak

I'm looking for the exact same thing, as I'm currently logging a sophos av database. I have zero idea what these actiontaken=116,117,101,etc. mean, and would like a list or some sort of feedback as to where to get this info. 

Note, I maybe pretty ignorant here, but I've used google for the past 2 hours trying to find a list and don't see anything pertaining to Sophos and actiontaken lists.

Hello JacobAnderson,

I've used google
Google is your friend but Google isn't God. Neither is  jak (no derision intended, Jak [;)]) but I'd rather ask him than Google on these matters and moreover I'd definitely trust him. He has already given the answer: the Enumerations table. Not all values are unique though so you might want to consult the EnumNames table for the applicable EnumID.

Christian