pstoric 0 Posted October 26, 2020 Share Posted October 26, 2020 We've recently enabled email notifications but the volume of alerts we are getting is way too much and it's for items that ESET is quarantining which makes it not a threat. Is there a way to only receive and email alert for and items detected buy not cleaned? The one below I'm pointing to seems to be about detections found but not cleaned only during a scan but what if someone downloads somethings malicious and it's found but can't be cleaned which would be outside of a detection window. Link to post Share on other sites
Administrators Marcos 3,573 Posted October 26, 2020 Administrators Share Posted October 26, 2020 Since you don't want to be notified of threats that were 100% cleaned, I assume the following notifications are those you would like to get: Link to post Share on other sites
pstoric 0 Posted October 26, 2020 Author Share Posted October 26, 2020 1 hour ago, Marcos said: Since you don't want to be notified of threats that were 100% cleaned, I assume the following notifications are those you would like to get: But the first option in your pic is for items detected during computer scans by ESET but 90% of mine are from real-time detection so I'm not sure if that would apply. Link to post Share on other sites
Administrators Solution Marcos 3,573 Posted October 26, 2020 Administrators Solution Share Posted October 26, 2020 A custom report like this could work: Link to post Share on other sites
pstoric 0 Posted October 27, 2020 Author Share Posted October 27, 2020 Thanks for the tip! I'm going to try that today and disable the other one but the only thing I'm concerned about is how can I test it? Is there something like eicar I can use that ESET would detect but not be able to clean? Link to post Share on other sites
Administrators Marcos 3,573 Posted October 27, 2020 Administrators Share Posted October 27, 2020 I assume it should be possible to test it by changing the real-time protection cleaning level to "Always ask user" and selecting No action when eicar is detected. pstoric 1 Link to post Share on other sites
pstoric 0 Posted October 27, 2020 Author Share Posted October 27, 2020 2 hours ago, Marcos said: I assume it should be possible to test it by changing the real-time protection cleaning level to "Always ask user" and selecting No action when eicar is detected. Thanks! it seems to be working. I'll monitor it over the next few days but looks like I'm in the right direction. Link to post Share on other sites
Recommended Posts