The GoTo Community is currently experiencing some technical issues affecting new posts and comments. You may need to reload the page you are on before you can post a comment. We are actively working with our service provider and apologize for the frustration.

Forum Discussion

Boyd B.'s avatar
Boyd B.
Contributor
3 years ago

Antivirus Health - Threat Found

If a threat has been detected by GoToResolve EPP, where can I find more details about the specific threat detected?  For example: Last scan report   Last scan: Aug 17, 2023, 10:09 AM Scan result...
Boyd B.'s avatar
Boyd B.
Contributor
3 years ago

I appreciate the suggestion Glenn, but Windows Defender on the target machine is reporting no threats at all. Is the threat reported by GoToResolve is true or false? Without more detail, I am stuck.

GlennD's avatar
GlennD
GoTo Manager
3 years ago

Understood. So I think we talked about this already in another post. My understanding is that in this situation Windows Defender scanned and may have initially registered 'something', but it ultimately decided that there was nothing of concern. Resolve is picking up on the fact that 'something' was potentially detected so it is showing a notification. Your local AV should be the one you pay attention to at the end of the day. 

 

Improvements to EPP in Resolve will correct this miscommunication. I will try to find out more about this from the team next week.

 

  • Boyd B.'s avatar
    Boyd B.
    Contributor
    2 years ago

    GlennD 

     

    The Antivirus Health last scan report now shows the specific threat that was found, including a path. I definitely appreciate that improvement. Unfortunately, it is not yet a complete solution since the threat report is never cleared by the console. When can we expect that issue to be resolved?

    • GlennD's avatar
      GlennD
      GoTo Manager
      2 years ago

      Boyd B. jcolon Following up on this, the ability to clear the notifications is planned for a future update.

       

    • GlennD's avatar
      GlennD
      GoTo Manager
      2 years ago

      Hi Boyd B. jcolon,

       

      This feature continues to be developed and improved. Right now I do not have an ETA for this specific behavior, but I am checking with our team.

        

    • jcolon's avatar
      jcolon
      Active Contributor
      2 years ago

      I have the exact same issue (shaking my head)...

  • Boyd B.'s avatar
    Boyd B.
    Contributor
    2 years ago

    Revisiting this topic.

    There is zero benefit to this feature as it is currently implemented. Why are you providing the Threat Found indicator, without also providing the reason it is being displayed? What is the logic behind this decision? 

     

    I really think correcting this feature's shortcomings should be a very high priority.

    • Boyd B.'s avatar
      Boyd B.
      Contributor
      2 years ago

      So - some great progress on this topic. I can now see the detailed reason for raising the alert.

       

      Now, how do I make it go away if the situation has been resolved?