March AutoFocus Features
About Each Feature
Additional WildFire Static Analysis Data in Sample Reports
AutoFocus™ now displays additional WildFire analysis data that can be viewed under the Static Analysis section of an AutoFocus sample details page:
For more information about the concepts referenced in this feature, refer to:
PE Compilation Timestamp
AutoFocus™ now displays the compilation timestamp for PE files on the sample details page. This time and date represents when an executable image was created. Unusual timestamps, such as a random value or a series of zeros can indicate tampering.
To view the PE sample compilation timestamp, start a search for a PE file and click on a sample for details.
You can also use the
Compilation Timestampindicator listed under Analysis Artifacts to search for samples based on a PE file creation date and time.