Report an Incorrect Verdict

When you want WildFire to reanalyze a file and change its official verdict, you can use the
Report Incorrect Verdict
feature from the
Policies
Malware
Hash Control
page on the ESM Console. This action flags a sample for further analysis by Palo Alto Networks.
When reporting an incorrect file verdict, you can provide your email address and additional information about why you believe the verdict is incorrect. If you choose to provide your email address, you will receive an email notification containing the results of the analysis. If WildFire changes the verdict, the ESM Console also displays the updated verdict on the
Hash Control
page.
  1. Locate the verdict and report it to WildFire.
    1. From the ESM Console, select
      Policies
      Malware
      Hash Control
      .
    2. In the search field, enter the full or partial hash value or process name and then click the search icon to filter the list of hashes.
    3. Select the row for the hash to expand the hash details and then click
      Report as Incorrect
      .
  2. Fill out the report with details that indicate why the verdict is incorrect.
    1. Review the sample information and verify the verdict that you are reporting.
    2. (
      Optional
      ) Enter an email address to receive an email notification after Palo Alto Networks completes the additional analysis.
    3. (
      Optional but recommended
      ) Enter any details that may help us to better understand why you disagree with the verdict.
    4. Click
      Submit
      .

Recommended For You