topic Firepower Email Report in Network Security https://community.cisco.com/t5/network-security/firepower-email-report/m-p/3922774#M17596 <P>Hello Everyone,</P><P>&nbsp;</P><P>I have a question and have not found an answer while Googling or reviewing the FirePower Documentation.&nbsp; At the end of some of my emailed alerts, I see (+#) where # is from 0 to 7.&nbsp; &nbsp;What does this information represent?</P><P>&nbsp;</P><P>Example (Clean UP)</P><PRE>2019-09-11 08:39:32 tcp XX.XX.XX.XX:57208 -&gt; XX.XX.XX.XX:443 MALWARE-CNC Win.Trojan.Gh0st variant outbound connection (1:27964:5) (+1)</PRE><P>Thanks for any info in advanced.</P><P>Brandon.&nbsp;</P> Wed, 11 Sep 2019 18:57:15 GMT brandonpitrolo 2019-09-11T18:57:15Z Firepower Email Report https://community.cisco.com/t5/network-security/firepower-email-report/m-p/3922774#M17596 <P>Hello Everyone,</P><P>&nbsp;</P><P>I have a question and have not found an answer while Googling or reviewing the FirePower Documentation.&nbsp; At the end of some of my emailed alerts, I see (+#) where # is from 0 to 7.&nbsp; &nbsp;What does this information represent?</P><P>&nbsp;</P><P>Example (Clean UP)</P><PRE>2019-09-11 08:39:32 tcp XX.XX.XX.XX:57208 -&gt; XX.XX.XX.XX:443 MALWARE-CNC Win.Trojan.Gh0st variant outbound connection (1:27964:5) (+1)</PRE><P>Thanks for any info in advanced.</P><P>Brandon.&nbsp;</P> Wed, 11 Sep 2019 18:57:15 GMT https://community.cisco.com/t5/network-security/firepower-email-report/m-p/3922774#M17596 brandonpitrolo 2019-09-11T18:57:15Z