cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
67
Views
0
Helpful
0
Replies
Beginner

Firepower Email Report

Hello Everyone,

 

I have a question and have not found an answer while Googling or reviewing the FirePower Documentation.  At the end of some of my emailed alerts, I see (+#) where # is from 0 to 7.   What does this information represent?

 

Example (Clean UP)

2019-09-11 08:39:32  tcp XX.XX.XX.XX:57208 -> XX.XX.XX.XX:443 MALWARE-CNC Win.Trojan.Gh0st variant outbound connection (1:27964:5) (+1)

Thanks for any info in advanced.

Brandon.