Document toolboxDocument toolbox

(v2.0) Package detail in administrator view

Owned by Pavel Novák
Oct 06, 2022
3 min read

By clicking on the package title or double clicking on the row in a list of packages the package detail is shown. This view is similar to the Package detail view for the user. The administrator’s view contains some additional details and actions. Like after clicking on the + in the list of files, the list of all the results of file checks is displayed, as configured in Detection settings.

In the top right corner, there is an icon for showing of the context menu with actions, which can be performed for the package. Those are mostly the same actions, that are available on the right side of the row in the lists of packages for this package. Additionally the following action can be available here:

Recheck. Runs the checks by detection engines as configured in Detection settings again. Useful for example for verifying whether new anti-virus signatures find out new malware, etc. Not available for encrypted packages.

Encrypt. Encrypts the package files (using the server key).

Decrypt. Decrypts the package files, if encrypted by the server key. Packages encrypted by user’s password cannot be decrypted, because the key is not known.

Under the action icons, there are the icons symbolizing flags of the package. Those are again mostly the same flags that are shown on the row in the list of packages for this package.

The package files are listed below and split according to their state between:

  • Active files

  • Quarantined files

  • Deleted files

  • Shredded files

For each file the administrator can perform some of the following actions depending on their state:

  • Delete - deletes the selected file (moves to deleted files, can be restored)

  • Shred - shreds the selected file = deletes data from the disk (cannot be restored)

  • Recheck - similarly like for the whole package, runs the checks again, but only for the selected file. Not available for encrypted files.

  • Restore deleted - restores an already deleted file

After clicking on the + in front of any file name, details about file check results are displayed.

For Sandbox type detection engine results, additional details can be displayed using the following icons on the right side of the row:

After hovering the mouse over this icon a pop up table with detailed information received from Sandbox is shown.

Shows slide in panel from the right side of the screen, where detailed report in the PDF format generated by the Sandbox is available for download. This also contains detailed information about the file check.

For MIME type detection engine results, additional details can be displayed using the following icon on the right side of the row:

Shows slide in panel from the right side of the screen, where a list of all found MIME types is displayed and also details about all found objects and their MIME types. This is useful for files containing multiple nested objects, like archives, office documents, etc.