Scan codes

[TonyW]

What do the various scan codes that appear in square brackets within the scan log mean? For example, [G], [NF] and [UP].

[StevieO]

Hi i wondered the same, and Joe from Prevx was kind enough to explain.


Community.OuterEdge is an identifier which says that based on your
heuristics settings ( these files are on the "outer edge" of the community - meaning, they are either too new or too unpopular to be automatically trusted for your system, it doesn't necessarily mean they would be blocked or detected but its more of just an identifier

OOP is a user override (or a local FP submission)

D, DN, DP, DPN are Age/Spread detections which are triggered from the
Settings > Heuristics Settings Page (the P and N are flags which we use
to track down the correct file when a user sends us the log )

B, BP are "known bad" - the file would be found regardless of your
heuristic level

U, UP - Untrusted - we aren't blocking this file but we don't fully
trust it just yet (although it is most likely safe)

G, GP - Known good - these files are definitely clean and malware free

Regards,

S

[TonyW]

Thanks for some of those - useful to know.