The SMAP Sandbox page in Seqrite XDR provides a consolidated view of files submitted to the Seqrite Malware Analysis Platform (SMAP) for analysis. It displays file details, analysis verdicts, file hashes, original file paths, endpoint information, and associated alerts.
Use this page to review file analysis results, identify potentially malicious files, and investigate the alerts associated with the submitted files.
Viewing SMAP Sandbox Reports
To view the SMAP Sandbox report:
- Log on to the Seqrite CSM > XDR console.
- Navigate to Reports > SMAP Sandbox.
- Review the list of files submitted to SMAP and their corresponding analysis details.
The page displays the following information:
| Field | Description |
|---|---|
| File Name | Displays the name of the file submitted for analysis. Use the adjacent icon, where available, to open or access the file. |
| SMAP Verdict | Displays the analysis verdict returned by SMAP, such as Malware or Unknown. |
| Hash | Displays the file hash, which can be used to identify the file and correlate it with other security events. |
| Original File Path | Displays the original location of the file on the endpoint from which it was submitted. |
| Endpoint | Displays the name of the endpoint associated with the submitted file. |
| User Name | Displays the user associated with the file submission. |
| Alert ID | Displays the identifier of the alert associated with the file, where applicable. Use the adjacent Copy icon to copy the alert ID. |
| Time | Displays the date and time associated with the file submission or report entry. |
Filtering Reports
Use the Filter field to narrow the displayed records based on the supported filter criteria. Filtering helps you locate specific files or review records relevant to an investigation.
Selecting the Time Range
Use the View drop-down list to select the required reporting period. For example, select Last 24 Hours to view records within the last 24 hours.
Adding a File
Click Add to initiate the file submission workflow, where supported. Provide the required file details and submit the file for analysis according to the prompts displayed on the screen.
Exporting Reports
Click Export to export the displayed report data in PDF/Excel for further analysis or record keeping.
Investigating Associated Alerts
Use the Alert ID to correlate a submitted file with its associated alert in XDR. This helps you review the original detection, examine the endpoint activity, and determine whether additional investigation or remediation is required.