New Features: June 2018

The following topics provide a snapshot of the AutoFocus™ features introduced in June 2018. Each section includes context for the new feature, with steps to get started.
June AutoFocus Features
About Each Feature
Enhancements to Scheduled Reporting
You can now apply filters to your preexisting AutoFocus reports to narrow down the results that are shown in a scheduled email report. You can now specify the
Verdict
,
Source
, and the
Tag Group
, in addition to the existing
Time Frame
setting.
When configuring the
Email Schedule
, the following new filters are available:
  • Verdict
    —Select from
    Malware
    ,
    Grayware
    ,
    Benign
    ,
    Phishing
    , and
    Any Verdict
    to filter the report data based on a verdict.
  • Time Frame
    —Sets the emailed report to display sample data (based on the time stamp of when the sample was first forwarded or uploaded to WildFire for analysis) for the last 1, 7, 30, 90, or 180 days.
  • Source
    —Select from
    Firewall
    ,
    Proofpoint
    ,
    Traps
    ,
    Magnifier
    ,
    Manual API
    ,
    Traps
    Android
    ,
    WF Appliance
    , and
    Any Source
    to filter the report data based on the upload source.
  • Tag Group
    —Select from a pre-populated AutoFocus tag group list to filter based on the specified tag group.
email-schedule.png
You can only specify a single filter for a given context type. If you want to generate reports showing additional context configurations, you can create additional email schedules.
For more information on creating and configuring scheduled reports, refer to:
Additional Search Filters
You can now filter AutoFocus search page results based on tag groups and classes, in addition to standard tags.
Use the
Tag
drop-down to filter the results of your report. Whenever new parameters are selected, the report is automatically refreshed to reflect the updated data set.
From the
Search
, select from the following new tag filter options:
  • Tag Class
    —Select from
    None
    ,
    Actor
    ,
    Campaign
    ,
    Malware Family
    ,
    Exploit
    , and
    Malicious Behavior
    to filter the data set based on the tag class.
  • Tag Group
    —Select from a pre-populated AutoFocus tag group list to filter the data set based on the specified tag group.
tag-filter.png
For more information on using the AutoFocus search, refer to:
Additional Searchable Field in the Sample Details View
You can now search based on a static analysis property description from the sample details view.
When you hover over a
Risk
description under
Static Analysis
, a drop down menu displays. Click on the drop down to open additional tasks. From here, you can:
  • Add to Search
    —Adds a condition to an existing search using the selected behavior value.
  • Add to New Search
    —Opens a new search window and adds a search condition using the selected behavior value.
sa-info-field-search.png
For more information on using the AutoFocus search, refer to:

Recommended For You