Configuring an IOC scan schedule

You can configure an IOC scan schedule for computers on which the Endpoint Sensors component is installed.

To configure an IOC scan schedule:

1. In the window of the program web interface, select the Settings section, IOC scanning schedule subsection.
2. In the Start time drop-down lists, select the scan start time.
3. In the Time limit drop-down list, select a time limit for completing the scan.

   If a scan does not complete within the specified amount of time, some events may not be found.

4. Click the Save button.

The new IOC scan schedule will take effect immediately after the changes are saved. IOC scan results will be displayed in the alerts table.

See also IOC scan of events Viewing the table of IOC files Viewing information about an IOC file Uploading an IOC file Downloading an IOC file to a computer Enabling and disabling the automatic use of an IOC file when scanning events Deleting an IOC file Searching IOC scan results Filtering and searching IOC files Clearing an IOC file filter Supported OpenIOC Indicators of Compromise

Page top