
3
Reporting
You can access Threat Intelligence Exchange reports from the McAfee ePO Queries & Reports feature.
There are reports for the Threat Intelligence Exchange server, the module for VirusScan Enterprise,
and the Data Exchange Layer client.
Viewing reports
Threat Intelligence Exchange includes several reports that show threat information for files,
certificates, and events.
The reports are available in the McAfee ePO Queries & Reports feature. They show the following
information:
• New files and certificates seen in the
enterprise
• Top 10 systems with new files or
certificates
• Files and certificates organized by
reputation
• Blocked, allowed, and cleaned events
• Files and certificates with changed
reputations
• Observed events
Access reports
You create and view Threat Intelligence Exchange reports using McAfee ePO.
Task
For option definitions, click ? in the interface.
1
In McAfee ePO, click Menu | Reporting | Queries & Reports.
2
To quickly find Threat Intelligence Exchange reports, use the Quick find box.
• For server reports, enter TIE
• For module reports, enter module for VSE
• For Data Exchange Layer reports, enter DXL.
3
Click Run to see the report data.
See the McAfee ePO documentation for details about creating and using queries and reports.
3
McAfee Threat Intelligence Exchange 1.0.0 Product Guide
25
Comentarios a estos manuales