Hello When investigating the download of a file, I can see the file
listed under Meta field attachment. However I do not see this file under
Malware Analysis?I assumed I would at least see the static analysis? I
do see a large number of files under M...
In the Continuous Scan Configuration (Malware Analysis config) what is
the Source Host and Source Port config value. Is the Host the SA or the
conentrator? Can the port be any port or does it need to be 56003? Any
help would be much appreciated.Jeff
Here is some of the event Meta... attachment : ***********.doc extension
: doc alert.id : nw32520 risk.info : common document formats
threat.category : informational threat.source : netwitness analysis.file
: common document formats feed.name : hunti...
Thanks Michael, as a follow up question, I am also unclear as to what
Malware Analysis service I should be configuring for the continuous
scan, the one on the dedicated Malware Analysis appliance or the
SA-Malware Analysis? ThanksJeff
