Virus Engine Operation Action

Common Event Grammar › Host Security Category › Antivirus Activity Class › Virus Engine Operation Action

Virus Engine Operation Action

The Virus Engine Error action can display any event that is recorded as part of the virus engine's normal function or operation. When an event cannot be mapped to a more specific CEG action, consider mapping the event to this action.

Information	Level
Source - User Information	Tertiary
Source - Host Information	Tertiary
Source - Object Information	Tertiary
Source - Process Information	Tertiary
Source - Group Information	Tertiary
Dest - User Information	Tertiary
Dest - Host Information	Primary
Dest - Object Information	Primary
Dest - Group Information	Tertiary
Agent - Information	Primary
Agent - Host Information	Primary
Event Source - Host Information	Primary
Event Source - Information	Tertiary
Event - Information	Primary
Result - Information	Primary

Result	event_result	event_severity
Success	S	2
Failure	F	3