About Symantec Insight™ result parameters

HOWTO95277
Last Updated October 20, 2014

About Symantec Insight™ result parameters

If Symantec Insight™ detects a file as infected, the Insight result consists of the following information:

Note:

The Insight result parameters are available in the ICAP response only if the file has been convicted by Insight and the EnableReputationInfo parameter is set to true in the configuration.xml file.

Table: Symantec Insight™ results and their possible values describes the various parameters returned by Insight.

Table: Symantec Insight™ results and their possible values

Factor

Description

Values

Reputation

Reputation of the file

  • TRUSTED

  • GOOD

  • UNPROVEN

  • POOR

  • UNTRUSTED

Prevalence

Prevalence of the file

  • FEW

  • TENS

  • HUNDREDS

  • THOUSANDS

  • MILLIONS

Age

Age of file

  • VERY_RECENT

  • DAYS

  • WEEKS

  • MONTHS

  • YEARS

File type

Type of file

Only Portable Executable (PE) files

SHA256

SHA256 hash value of a file, which uniquely identifies the file

 
Imported Document ID: HOWTO95277
Legacy ID: v85288383_v80846623

Thanks for your feedback. Let us know if you have additional comments below. (requires login)

    © 1995-2019 Symantec Corporation