McAfee QUICKCLEAN 3.0 Guía de usuario descargar pdf (Pagina 90)

Enter the appropriate information in the respective fields.

Option name Definition

Name

Enter the name for the analyzer profile. It should allow you to easily identify

the characteristics of that analyzer profile.

Description

Optionally, provide a detailed description of the analyzer profile.

VM Profile

Select the VM profile McAfee Advanced Threat Defense must use for

dynamically analyzing a file.

Automatically Select

If you want McAfee Advanced Threat Defense to automatically select the VM

profile for Windows 32 bit and Windows 64 bit, select Enable and then select

the VM profiles from the Windows 32-bit VM Profile and Windows 64-bit VM Profile.

Archive Password

Enter the password for McAfee Advanced Threat Defense to unzip a

password-protected malware sample.

Confirm Password

Re-enter the password for confirmation.

Minimum Run Time

(sec)

Specify the minimum time duration for which McAfee Advanced Threat

Defense should dynamically analyze the sample. The default value is 60

seconds. If the file stops executing before this time period, the dynamic

analysis is stopped.

Maximum Run Time

(sec)

Specify the maximum time duration for which McAfee Advanced Threat

Defense should dynamically analyze the sample. If the file does not stop

execution before this time period expires, the dynamic analysis is stopped.

Analysis Summary

Select to include the Analysis Summary report in the analysis results. See

View the Analysis Summary report on page 104.

Packet captures

Select to capture the network packets if the file attempts to communicate

during dynamic analysis.

Dropped Files

Select to generate the Files Created in Sandbox report. See Dropped files

report on page 110.

Disassembly Results

Select if you want McAfee Advanced Threat Defense to generate the

disassembly code of PE files. See Disassembly Results on page 110.

Execution Path Data

Select to generate Execution Path Listing report. See Logic Path Graph on

page 111.

User API Log

This report provides Windows user-level DLL API calls made directly by the

malware sample during dynamic analysis. See User API Log on page 116.

Local Black List

Select if you want McAfee Advanced Threat Defense to check the file's MD5

hash value with the list of black-listed MD5 hash values in its local database.

Anti-Malware

Select if you want McAfee Advanced Threat Defense to scan the file using

McAfee Anti-Malware Engine.

GTI File Reputation

Select if you want McAfee Advanced Threat Defense to check the file's MD5

hash value with McAfee GTI. Make sure McAfee Advanced Threat Defense is

able to communicate with McAfee GTI, which is on the cloud.

Gateway Anti-Malware

Select if you want McAfee Advanced Threat Defense to check the file using

McAfee Gateway Anti-Malware Engine.

Sandbox

Select if you want the file to be dynamically analyzed. A file is not dynamically

analyzed if any of the static methods report it as a malware or a white-listed

file. If you want to dynamically analyze the file regardless of the result from

static analysis, select Run All Selected as well.

Make sure you have selected the VM profile and the Runtime Parameters.

Run All Selected

Select if you want McAfee Advanced Threat Defense to analyze the file using

all the selected analyze options regardless of the result from any specific

method.

Configuring McAfee Advanced Threat Defense for malware analysis

Managing analyzer profiles

McAfee Advanced Threat Defense 3.0.4 Product Guide

1 2 ... 85 86 87 88 89 90 91 92 93 94 95 ... 139 140

Comentarios a estos manuales

Sin comentarios

McAfee QUICKCLEAN 3.0 Guía de usuario Pagina 90

Comentarios a estos manuales

Relacionado con productos y manuales para Redes McAfee QUICKCLEAN 3.0