Infosec App for Splunk Dashboard- Malware Dashboard

[crizelle]

Hi,

Will the result on the Malware dashboard also change when we already clean the detected malware?

Thanks!

[igifrin_splunk · Accepted solution]

Hi @crizelle, the logic here is not specific to the InfoSec app but applies to many other dashboards you see in Splunk:

• Malware events come into Splunk with time stamps
• When you look at the Malware dashboard, it displays events in the past 24 hours by default but you can select a different time window (see screenshot below)
• If your anti-malware tool does not keep reporting on old malware events, the events will not show in the new time window