Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
Is there an available lookup for File Malware Disposition?
I am integrating Sourcefire with Splunk and the dashboards produce unknowns for Malware with file actions.
The dispositions I see are 1,4 and 3.