Focus
Focus
Table of Contents

Report an Incorrect Verdict

When you want WildFire to reanalyze a file and change its official verdict, you can use the Report Incorrect Verdict feature from the PoliciesMalwareHash Control page on the ESM Console. This action flags a sample for further analysis by Palo Alto Networks.
When reporting an incorrect file verdict, you can provide your email address and additional information about why you believe the verdict is incorrect. If you choose to provide your email address, you will receive an email notification containing the results of the analysis. If WildFire changes the verdict, the ESM Console also displays the updated verdict on the Hash Control page.
  1. Locate the verdict and report it to WildFire.
    1. From the ESM Console, select PoliciesMalwareHash Control.
    2. In the search field, enter the full or partial hash value or process name and then click the search icon to filter the list of hashes.
    3. Select the row for the hash to expand the hash details and then click Report as Incorrect.
  2. Fill out the report with details that indicate why the verdict is incorrect.
    1. Review the sample information and verify the verdict that you are reporting.
    2. (Optional) Enter an email address to receive an email notification after Palo Alto Networks completes the additional analysis.
    3. (Optional but recommended) Enter any details that may help us to better understand why you disagree with the verdict.
    4. Click Submit.