Forensics can use information from the Windows Event Log to monitor and analyze malware events from third party anti-virus vendors. Based on the Windows Event Log, Forensics can analyze attacks, terminate processes, delete or quarantine files, and do other attack remediation.
You can enable or disable third party integration in SmartEndpoint, from the Automatic Threat Analysis action. This works with most common vendors without manual configuration.
Note - Some third party vendors do not automatically send information to the Windows Event Log. To use third party vendor integration, make sure that your vendor is configured to send information to the Windows Event Log.
Events are detected when the client is online or offline.
To enable or disable Forensics Third Party Anti-Virus Vendor integration:
The Confidence level for automatic response window opens.