Indicators List Details
The Indicators tab only displays indicators drawn from the page of sample search results that you are currently viewing. For example, if your search returns 5 pages of search results and you are viewing the second page, the Indicators tab will only display indicators from that second page of samples. AutoFocus also filters the indicators by the scope you have selected for viewing the sample search results (view only
Public Samples, or
AutoFocus groups the indicators by type:
You can export a complete list or only the
Highly Suspectindicators by selecting the appropriate export option from the drop down menu ( ). For more information on using the page export options, see Export AutoFocus Page Content.
Indicators matching those forwarded to AutoFocus through MineMeld are marked with an indicator tag ( ), which specifies the number of matching indicators. Click on the indicator tag to view the full list of matches.
Each indicator lists the SHA256 hash of the sample(s) in which it was detected. Click on a hash to view sample details.
When you hover over an indicator, a drop down menu ( ) displays. Click on the drop down to open additional tasks. From here, you can: