The GoTo Community is currently experiencing some technical issues affecting new posts and comments. You may need to reload the page you are on before you can post a comment. We are actively working with our service provider and apologize for the frustration.
Forum Discussion
Antivirus Health - Threat Found
If a threat has been detected by GoToResolve EPP, where can I find more details about the specific threat detected? For example: Last scan report Last scan: Aug 17, 2023, 10:09 AM Scan result...
I suppose that is one of the problems here. I don't have a subscription for EPP, yet I still see some information related to that product. If you're going to display a threat indicator for those of us that don't have the subscription, you should provide more details than you do right now.
It does also work with other antivirus providers, so you can run updates and scans but you would still need to go to the antivirus software on the computer to see the details if something was discovered. I'm sure more useful information and actions will be added as we continue to roll out updates.
I appreciate the suggestion Glenn, but Windows Defender on the target machine is reporting no threats at all. Is the threat reported by GoToResolve is true or false? Without more detail, I am stuck.
Understood. So I think we talked about this already in another post. My understanding is that in this situation Windows Defender scanned and may have initially registered 'something', but it ultimately decided that there was nothing of concern. Resolve is picking up on the fact that 'something' was potentially detected so it is showing a notification. Your local AV should be the one you pay attention to at the end of the day.
Improvements to EPP in Resolve will correct this miscommunication. I will try to find out more about this from the team next week.
The Antivirus Health last scan report now shows the specific threat that was found, including a path. I definitely appreciate that improvement. Unfortunately, it is not yet a complete solution since the threat report is never cleared by the console. When can we expect that issue to be resolved?
