McAfee QUICKCLEAN 3.0 Podręcznik Użytkownika Pobierz pdf (Strona 11)

• It has the McAfee Anti-Malware Engine embedded within it for signature-based detection.

• It dynamically analyzes the file by executing it in a virtual sandbox environment. Based on how the

file behaves, McAfee Advanced Threat Defense determines its malicious nature.

Figure 1-1 Components for malware analysis

Malware detection and McAfee

Advanced Threat Defense

The McAfee Advanced Threat Defense solution

McAfee Advanced Threat Defense 3.0.4 Product Guide

1 2 ... 6 7 8 9 10 11 12 13 14 15 16 ... 139 140

Product Guide 1
COPYRIGHT 2
TRADEMARK ATTRIBUTIONS 2
LICENSE INFORMATION 2
License Agreement 2
Contents 3
5 Creating analyzer VM 41 4
7 Analyzing malware 97 4
Index 139 5
About this guide 7
Find product documentation 8
Advanced 9
Malware detection and McAfee 10
Advanced Threat Defense 10
Web Gateway 14
Defense Appliance 17
Warnings and cautions 19
Usage restrictions 19
Unpack the shipment 20
Check your shipment 20
Port numbers 24
Handling the front bezel 27
Connect the network cable 28
Defense web application 31
Viewing user profiles 34
Add users 35
Figure 4-3 Add users 36
Edit Users 37
Delete Users 38
Troubleshooting 39
Delete the analysis results 40
Creating analyzer VM 41
• Confirm — Enter cr@cker42 45
Processor Configuration 47
Network Type 49
Select I/O Controller Types 49
Figure 5-12 Select a disk 50
Select Write 58
• Password — Enter cr@cker42 65
Figure 5-33 Run sigcheck.exe 67
Figure 5-36 Run MergeIDE 68
Figure 5-37 Warning message 68
Figure 5-38 Activate Windows 69
Figure 5-39 Settings option 70
Managing VM profiles 74
View VM profiles 75
Create VM profiles 76
Figure 5-51 Shut down the VM 78
Figure 5-53 79
Edit VM profiles 80
Delete VM profiles 80
View the VM creation log 81
Defense for malware analysis 83
Terminologies 84
Managing analyzer profiles 87
View analyzer profiles 88
Create analyzer profiles 89
Integration with McAfee ePO 91
Analyzing malware 100
View the analysis results 102
Analysis Results section 108
Analysis Environment section 108
Operations details section 109
Disassembly Results 110
Dropped files report 110
Logic Path Graph 111
User API Log 116
Malware analysis monitors 118
File Counters 119
Files analyzed by File Type 119
Analyzer Profile Usage 120
Top malware by file name 120
VM Creation Status monitor 121
System Information 122
Threat Defense 123
CLI syntax 124
Log on to the CLI 125
Meaning of "?" 125
Appliance 125
List of CLI commands 126

Komentarze do niniejszej Instrukcji

Brak uwag

McAfee QUICKCLEAN 3.0 Podręcznik Użytkownika Strona 11

Komentarze do niniejszej Instrukcji

Powiązane produkty i podręczniki dla Networking McAfee QUICKCLEAN 3.0