SPL
Microsoft Antimalware Malware Detection Details
0 0
Description
This query will return results if malware is detected, and return detailed information on the Malware detected.
sourcetype="WinEventLog:System" SourceName="Microsoft Antimalware" EventCode=1116 |eval Date=strftime(_time, "%Y/%m/%d")| stats count by host, Category, Name, Path, Severity, Date
Comments
0 total
Be the first to comment on this SPL.
Leave a comment
You must log in to post a comment.