Cortex XDR Pro Malwarescan with partial success in Action center

[RFeyertag]

Hello dear community, 

is there any explanation why the malware scan ends up with partial success? Is there any log where we can find the answer?

https://live.paloaltonetworks.com/t5/general-topics/scan-completes-with-partial-success/m-p/509603#M...

BR

Rob

[neelrohit]

Hi @RFeyertag ,

Thank you for writing to Live Community!

This situation occurs in circumstances where there are certain applications,processes, files or executables which are running during the malware scan and those processes cannot be scanned during runtime. This results in some files/executables where scan is skipped and hence it shows the output as scanned with partial success. 

The remediation is to reboot the endpoints to terminate any running processes which reject scanning during runtime and then the scan should complete successfully. This is generally observed on some applications(eg. like database applications when they are running DB queries or writing new queries to the disk) which cannot afford examination and intrusive examination during runtime and hence Dynamic Security testing fails on them.

Hope that answers your question.

[RFeyertag]

Hello Neelrohit!

thank you for your explanation. 

Can we see which files or applications were skipped etc. in a log?

BR

Rob