On-Premise Endpoint

Sophos Enterprise Console Sophos Virus Definitions

On-Premise Endpoint requires membership for participation - click to join

Thread Info

State Not Answered
Locked Locked
Replies 4 replies
Subscribers 3 subscribers
Views 12209 views
Users 0 members are here

Options

Suggested

This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Sophos Virus Definitions

LeePhipps over 8 years ago

Is there a way to see all virus definitions currently in your database?

For example I have been asked if I can show we are covered for a certain virus (HPmal/EccKrpt-A) that has hit another LA.

This thread was automatically locked due to age.

Parents

0 QC over 8 years ago

Hello Lee Phipps,

(first of all, I'm not Sophos) could you elaborate on what you want to see or find out?

HPmal/EccKrpt-A is a Sophos definition, Protection available since gives the time the detection has been released, revisions are indicated by the Last updated field. It takes some time - depending on your updating intervals - until the IDE is available on the endpoint. If your SUM and endpoints are updating you should have an up-to-date definition for HPmal/EccKrpt-A, as it has been published a month ago. Please see also How to determine whether you're receiving the latest data protection updates.

Please note that the analysis shows it's a generic detection, furthermore it is prefixed HPmal (a description can be found in article 113342) - thus it's not a pre-execution detection. Nevertheless - according to search results - it seems to be effective.

Christian
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 QC over 8 years ago

Hello Lee Phipps,

(first of all, I'm not Sophos) could you elaborate on what you want to see or find out?

HPmal/EccKrpt-A is a Sophos definition, Protection available since gives the time the detection has been released, revisions are indicated by the Last updated field. It takes some time - depending on your updating intervals - until the IDE is available on the endpoint. If your SUM and endpoints are updating you should have an up-to-date definition for HPmal/EccKrpt-A, as it has been published a month ago. Please see also How to determine whether you're receiving the latest data protection updates.

Please note that the analysis shows it's a generic detection, furthermore it is prefixed HPmal (a description can be found in article 113342) - thus it's not a pre-execution detection. Nevertheless - according to search results - it seems to be effective.

Christian
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data