Previous Topic: Virus Quarantine ActionNext Topic: Virus Scan Stop Action


Virus Scan Started Action

The Virus Scan Started action occurs when starting a virus scan on a given host. There are two possible results for this action: S for successful, F for failure.

Information

Level

Source - User Information

Secondary

Source - Host Information

Tertiary

Source - Object Information

Tertiary

Source - Process Information

Tertiary

Source - Group Information

Tertiary

Dest - User Information

Secondary

Dest - Host Information

Primary

Dest - Object Information

Primary

Dest - Process Information

Secondary

Dest - Group Information

Tertiary

Agent - Information

Primary

Agent - Host Information

Primary

Event Source - Host Information

Primary

Event Source - Information

Tertiary

Event - Information

Primary

Result - Information

Primary

The important information for this action is which virus scan was initiated on which host. The event information was expressed on which host and recorded by which agent on which host.

Result

event_result

event_severity

Success

S

2

Failure

F

3