HTTP File Download Overview
A record is maintained of all file metadata sent to the cloud for inspection. These are files downloaded by hosts and found to be suspicious based on known signatures or URLs. From the main page, click the file’s signature to view more information, such as file details, what other malware scanners say about this file, and a complete list of hosts that downloaded this file.
When managing Juniper ATP Cloud with Security Director, you must select ATP Cloud realm from the available pulldown.
Export Data—Click the Export button to download file scanning data to a CSV file. You are prompted to narrow the data download to a selected time-frame.
Table 1 shows the following information available on this page:
Table 1: HTTP Scanning Data Fields
Field | Definition |
|---|---|
File Signature | A unique identifier located at the beginning of a file that provides information on the contents of the file. The file signature can also contain information that ensures the original data stored in the file remains intact and has not been modified. |
Threat Level | The threat score. Note: Click the three vertical dots at the top of the column to filter the information on the page by threat level. |
Filename | The name of the file, including the extension. Note: Enter text in the space at the top of the column to filter the data. |
Last Submitted | The time and date of the most recent scan of this file. |
URL | The URL from which the file originated. Note: Enter text in the space at the top of the column to filter the data. |
Malware | The name of file and the type of threat if the verdict is positive for malware. Examples: Trojan, Application, Adware. If the file is not malware, the verdict is "clean." Note: Enter text in the space at the top of the column to filter the data. |
Category | The type of file. Examples: PDF, executable, document. Note: Enter text in the space at the top of the column to filter the data. |