Events All
The following columns are available for the
- Event Time: The date and time of the event. Click to view the Event Details panel. Users with access permissions to edit policies can use the available Add to Policy button directly from the panel. For details on adding to a policy, see Add an Application From Reports.
- Reputation: Indicates the results of the reputation scan analysis.
- Platform: The platform that the event came from.
- Description: The description of the event.
- Event Category: The category of the event.
- User Name: The user name of the user who triggered the event. Click to view the User Report.
- Host Name: The host name where the event was triggered. Click to view the Host Report.
- Workstyle: The Workstyle containing the rule that triggered the event.
- Event Type: The type of event that occurred.
- Elevation Method: The method of elevation.
- Authorization Source: The method used to authorize the application, such as: a user prompt, a rule script running, or through a Password Safe integration.
Update Reputations
If you are using a reputation service such as VirusTotal, you can update the reputation value collected in the events reporting. A valid reputation for an application can help you make an informed decision on how to manage that application in your policy.
To update the reputation, select the event, and then click Update Reputations. You can select more than one event at a time.
For more information about using reputation, see Set Up Reputation Integration.
