topic Re: Determine source for threat alert notification email in Advanced Threat Prevention Discussions

Determine source for threat alert notification email

dasbirdie — Tue, 08 Aug 2017 09:05:17 GMT

Hi everyone,

this seems to be quite an odd question, but I was wondering whether it is possible to determine whether a threat alert email has been "sent by" the threat prevention or WildFire?
Does the presence of a filedigest indicate that this threat alert notification has originated from WildFire?

BR, birdie

Re: Determine source for threat alert notification email

dasbirdie — Tue, 15 Aug 2017 09:00:32 GMT

Just in case somebody else might be wondering whether it was possible or not: Yes it is. There are ThreatID ranges by which one can determine what triggered the notification: https://live.paloaltonetworks.com/t5/Threat-Vulnerability-Articles/Threat-ID-Ranges-in-the-Palo-Alto-Networks-Content-Database/ta-p/59969

BR, birdie