ESET Anti-Virus

Applies To: Latest business version of ESET Antivirus (Endpoint Protection).

Overview

ESET Antivirus is the most effective protection you can find to combat today's huge volumes of Internet and email threats. It provides comprehensive antivirus and anti-spyware protection without affecting your computer's performance. Using advanced ThreatSense technology, ESET Antivirus proactively protects you from new attacks, even during the critical first hours when other vendors' products aren't aware the attack even exists.

EventTracker monitors detected threat activity, action taken against threat activity, quarantined malwares, firewall events, HIPS alerts etc and generates flex reports, flex dashboards and alerts for the same.

EventTracker Knowledge Pack for ESET Antivirus allows you to monitor the following components:-

Security - Detected threat activity,HIPS alerts and quarantined threat activity.
Operation - Firewall allowed and denied traffics.
Compliance - User login and logout activities.

Previous Next

Once ESET Antivirus is configured to deliver events to EventTracker Manager; alerts, dashboards and reports can be configured into EventTracker.

Some of the Knowledge Packs available in EventTracker are listed below. For more information please refer Integration Guide.

Security

Alerts

ESET AV-Threat activities: This alert is generated when a threat is detected by the ESET Endpoint Protection.
ESET AV-HIPS alerts: This alert is generated when any IPS alert detected by ESET Endpoint Protection.
ESET AV-Quarantined events: This alert is generated when ESET Endpoint Protection quarantines any detected malware.

Reports

ESET AV-Threat activities: This report provides details about all the threat that are detected by ESET Endpoint Protection.
ESET AV-HIPS alerts: This report provides details about all the IPS alerts that are detected by the ESET Endpoint Protection.
ESET AV-Quarantined events: This report provides details about all the detected malware when they are quarantined by the ESET Endpoint Protection.

Operation

Reports

ESET AV-Firewall aggregated event: This report provides details on all the firewall aggregated events including traffic allowed and denied events.

Compliance

Reports

ESET AV- Login and logout activity: This report provides details about all the login and logout activities.

Scope

The configuration details in this guide are consistent with EventTracker version 8.x and later,Latest business version of ESET Antivirus (Endpoint Protection).

Documentation:

For more information please refer to the Integration guide