That's different.Go to Analysis > Files > Malware Event and then go to the Table View. There will be alerts here for when a vulnerable application is detected by AMP on an endpoint. You can sort/search based on Event Type to find these, though the ex...
Kaustubh, Do you have a Defense Center (FireSight Management)? If so, all of the vulnerability data will show up there if it has been linked with your AMP account. The reporting features in the Defense Center make it very easy to export that data. Un...
To be clear, AMP does not report on file changes. Each time a file changes, AMP will check to see if it's malware. If it's malware it will block it. It will tell you how that malware runs, give you all the data you need to do breach hunting and contr...
