McAfee QUICKCLEAN 3.0 Betriebsanweisung PDF herunterladen (Seite 89)

Create analyzer profiles

Before you begin

If you intend to select the dynamic analysis option in the analyzer profile, make sure that

you have created the required VM profile. VM profiles are also required if you want to use

the Automatically Select OS option.

Task

Select Policy | Analyzer Profile | New.

The Analyzer Profile page is displayed.

Configuring McAfee Advanced Threat Defense for malware analysis

Managing analyzer profiles

McAfee Advanced Threat Defense 3.0.4 Product Guide

1 2 ... 84 85 86 87 88 89 90 91 92 93 94 ... 139 140

Product Guide 1
COPYRIGHT 2
TRADEMARK ATTRIBUTIONS 2
LICENSE INFORMATION 2
License Agreement 2
Contents 3
5 Creating analyzer VM 41 4
7 Analyzing malware 97 4
Index 139 5
About this guide 7
Find product documentation 8
Advanced 9
Malware detection and McAfee 10
Advanced Threat Defense 10
Web Gateway 14
Defense Appliance 17
Warnings and cautions 19
Usage restrictions 19
Unpack the shipment 20
Check your shipment 20
Port numbers 24
Handling the front bezel 27
Connect the network cable 28
Defense web application 31
Viewing user profiles 34
Add users 35
Figure 4-3 Add users 36
Edit Users 37
Delete Users 38
Troubleshooting 39
Delete the analysis results 40
Creating analyzer VM 41
• Confirm — Enter cr@cker42 45
Processor Configuration 47
Network Type 49
Select I/O Controller Types 49
Figure 5-12 Select a disk 50
Select Write 58
• Password — Enter cr@cker42 65
Figure 5-33 Run sigcheck.exe 67
Figure 5-36 Run MergeIDE 68
Figure 5-37 Warning message 68
Figure 5-38 Activate Windows 69
Figure 5-39 Settings option 70
Managing VM profiles 74
View VM profiles 75
Create VM profiles 76
Figure 5-51 Shut down the VM 78
Figure 5-53 79
Edit VM profiles 80
Delete VM profiles 80
View the VM creation log 81
Defense for malware analysis 83
Terminologies 84
Managing analyzer profiles 87
View analyzer profiles 88
Create analyzer profiles 89
Integration with McAfee ePO 91
Analyzing malware 100
View the analysis results 102
Analysis Results section 108
Analysis Environment section 108
Operations details section 109
Disassembly Results 110
Dropped files report 110
Logic Path Graph 111
User API Log 116
Malware analysis monitors 118
File Counters 119
Files analyzed by File Type 119
Analyzer Profile Usage 120
Top malware by file name 120
VM Creation Status monitor 121
System Information 122
Threat Defense 123
CLI syntax 124
Log on to the CLI 125
Meaning of "?" 125
Appliance 125
List of CLI commands 126

Kommentare zu diesen Handbüchern

Keine Kommentare

McAfee QUICKCLEAN 3.0 Betriebsanweisung Seite 89

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Vernetzung McAfee QUICKCLEAN 3.0