Threats - Indicators of compromise

Select an indicator from Threat Expanded View to view details.

Item	Description
Details	View the details of the IoC: SHA256 SHA1 MD5 File Size First Seen Classification Name Classification Type
Static Similarity	Where a file has not been identified as clean or malicious, but its static properties resemble a known threat, Trellix Insights displays a similarity. Trellix Insights displays the list of top matches, with a match percentage in a linear graph. For each match, file hashes can be selected in the drop down menu, and the following details are displayed: Threats associated with the file hash A description of similarity, by providing details of matches in groups of static attributes in the PE header
Global Prevalence	View a list of countries and sectors with impacted devices and a color-coded map. Global prevalence is based on the number of detections in the last 7 days.
Infection Comparison	View an interactive infection comparison based on the number of devices affected in your organization, the selected business sector, selected country, and globally. A red dot indicates affected devices. Hover over the dot to see the number of infections compared to the total number of devices. The size of the dot indicates the proportion of affected devices to the total number of devices. Sector and Country show the number of infections per million devices.
Product Distribution	View the detection distribution for the campaign or IoC grouped by Trellix products: By Products - Distribution of detection of Trellix products. ENS Scanners - Distribution of ENS Scanners, for example, JCM and AVSCAN.