Skip to content

Malware Scan Info

The malware scan information object describes characteristics, metadata of a malware scanning job.

  • Extends: scan

Attributes

Section titled “Attributes”

type_id

  • Type: integer_t
  • Requirement: required
  • Values:
    • 0 - Unknown: The type is unknown.
    • 1 - Manual: The scan was manually initiated by the user or administrator.
    • 2 - Scheduled: The scan was started based on scheduler.
    • 3 - Updated Content: The scan was triggered by a content update.
    • 4 - Quarantined Items: The scan was triggered by newly quarantined items.
    • 5 - Attached Media: The scan was triggered by the attachment of removable media.
    • 6 - User Logon: The scan was started due to a user logon.
    • 7 - ELAM: The scan was triggered by an Early Launch Anti-Malware (ELAM) detection.
    • 99 - Other: The scan type id is not mapped. See the type attribute, which contains a data source specific value.

The type id of the scan.

name

  • Type: string_t
  • Requirement: recommended

The administrator-supplied or application-generated name of the scan. For example: “Home office weekly user database scan”, “Scan folders for viruses”, “Full system virus scan”

uid

  • Type: string_t
  • Requirement: recommended

The application-defined unique identifier assigned to an instance of a scan.

end_time

  • Type: timestamp_t
  • Requirement: optional

The timestamp indicating when the scan job completed execution.

end_time_dt

  • Type: datetime_t
  • Requirement: optional

The timestamp indicating when the scan job completed execution.

num_files

  • Type: integer_t
  • Requirement: optional

The total number of files analyzed during the scan.

num_infected

  • Type: integer_t
  • Requirement: optional

The total number of files identified as infected with malware during the scan.

num_volumes

  • Type: integer_t
  • Requirement: optional

The total number of storage volumes examined during the malware scan.

size

  • Type: long_t
  • Requirement: optional

The total size in bytes of all files that were scanned.

start_time

  • Type: timestamp_t
  • Requirement: optional

The timestamp indicating when the scan job began execution.

start_time_dt

  • Type: datetime_t
  • Requirement: optional

The timestamp indicating when the scan job began execution.

type

  • Type: string_t
  • Requirement: optional

The type of scan.

unique_malware_count

  • Type: integer_t
  • Requirement: optional

The number of unique malware detected across all infected files.

Constraints

Section titled “Constraints”

At least one of: name, uid

Used By

Section titled “Used By”