cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
405
Views
0
Helpful
0
Replies

Cisco AMP not detecting zombies.pdf when transferred to other folders

aji_conde
Level 1
Level 1

Good day!

 

I have an ongoing POC/POV that requires AMP to display infected files. I tested AMP functionality with the trigger file Zombies.pdf but I got inconsistent results. When the file is transferred to a specific folder in the D:\ , that's the only time that AMP gets triggered and file is detected as shown in the Files table. When it gets transferred to different folders (e.g. desktop), there's no trace of the file even on the Files table. Note that the destination is the same server, only folders where it was transferred to were different.

 

Any suggestions/recommendations?

 

Thanks!

0 Replies 0