Filtering and searching IOC files

To filter or search for IOC files based on required criteria:

1. In the program web interface window, select the IOC/IOA Analysis section, IOC Scanner subsection.

   The table of IOC files opens.

2. Depending on the filtering criterion, do the following:
   • By importance
     1. Click the icon to open the filter configuration window for IOC files.
     2. Select one or several of the following importance levels:
        • Low.
        • Medium.
        • High.
     3. Click the Apply button.
   • By file name
     1. Click the Name link to open the filter configuration window for IOC files.
     2. Enter one or several characters of the IOC file name.
     3. Click the Apply button.
   • By server name
     1. Click the Servers link to open the filter configuration window for IOC files.
     2. Select the check boxes opposite those servers that you want to add to filter criteria.
     3. Click the Apply button.
   • By state of IOC files
     1. Click the Autoscan link to open the filter configuration window for IOC files.
     2. Select one of the following options:
        • Enabled
        • Disabled

The table of IOC files will display only IOC files that match the filter criteria you have set.

You can use multiple filters at the same time.

See also IOC scan of events Viewing the table of IOC files Viewing information about an IOC file Uploading an IOC file Downloading an IOC file to a computer Enabling and disabling the automatic use of an IOC file when scanning events Deleting an IOC file Searching IOC scan results Clearing an IOC file filter Configuring an IOC scan schedule Supported OpenIOC Indicators of Compromise

Page top