From the course: Cisco CCNP Security SCOR v1.1 (350-701) Cert Prep

Unlock this course with a free trial

Join today to access over 25,000 courses taught by industry experts.

Dynamic file analysis

Dynamic file analysis

From the course: Cisco CCNP Security SCOR v1.1 (350-701) Cert Prep

Start my 1-month free trial Buy for my team

Dynamic file analysis

“

- [Instructor] We've already mentioned the fact that the dynamic nature of Cisco AMP offers more advanced protection as opposed to static point in time analysis offered by traditional antivirus solutions. When a file becomes present on any endpoint under the control of AMP, AMP will continuously watch the file and record the behavior and activity associated to the file regardless of whether the file is deemed as good or bad. Anytime that behavior changes over time, AMP can quickly alert and remediate the threat. We can see information about this by going under the analysis tab here at the top and we can choose file analysis. From here, we're going to see a couple of categories listed. We see your files and global files. From under the your files area, we can see a history of the analyzed files. In addition to the automatic analysis features within AMP, we can also submit our own specific files that we're concerned with here for analysis. Notice that the third entry down that we see…

Contents