topic Re: Threat in "ZIP", how do you determine what request it was in?? in General Topics

Threat in "ZIP", how do you determine what request it was in??

RobinClayton — Tue, 27 Nov 2018 15:10:56 GMT

I keep getting a specific threat logged for a "dll" which I suspect may be in a ZIP that has been inspected.

I can't seem to find any information on what ZIP it was in so I can corrolate the event with our web filtering system.

The threat log does not seem to give me any clues..

Cheers

Rob

Re: Threat in "ZIP", how do you determine what request it was in??

BPry — Tue, 27 Nov 2018 18:24:37 GMT

@RobinClayton,

If you click on the magnifer glass on that entry to get to the detailed log view, you should be able to see additional information that will either help you track down the sessions traffic logs or display the file name outright.