Viewing information about the detects of threats

You can enable or disable displaying information about alerts.

To enable or disable displaying the ALERTS section in the main menu:

1. In the main menu, go to your account settings and select Interface options.
2. In the Interface options window that opens, enable or disable the Show EDR alerts option.
3. Click Save.

The console displays the ALERTS subsection in the MONITORING & REPORTING section of the main menu. In the ALERTS subsection, you can view information about the detects of threats on the endpoint devices. If you add a license key for EDR Optimum, then Kaspersky Security Center Web Console automatically displays ALERTS subsection in the MONITORING & REPORTING section of the main menu. Also, you can add a widget that displays information about alerts. To view detailed information about detected threats by clicking the more details link, you have to install the Kaspersky application plug-ins that detect threats (Kaspersky Endpoint Agent plug-in and Kaspersky Endpoint Security for Windows plug-in).

The ALERTS subsection is displayed automatically only if you added the license key for EDR Optimum before enabling the Show EDR alerts option. If you added the license key after enabling the Show EDR alerts option, the ALERTS subsection will be displayed only after you re-enable this option.

Use the Filter menu to filter alerts by date and field values.

The Object type field contains the following values:

• unknown
• Phishing link
• virus
• Trojan
• malicious tool
• backdoor
• worm
• other application
• Adware
• Pornware
• Dangerous packed program
• Dangerous behavior

The Automatic response field contains the following values:

• Malicious object detected
• Object deleted
• Object disinfected
• Object failed to disinfect
• Object moved to Quarantine
• Password-protected archive detected
• Virus detected

See also: Scenario: Monitoring and reporting

Page top