From DDEI, download the SO from the internal Virtual Analyzer, DDAN or TMCM, and use them for virus scan.
The detection name by SO for the malicious samples are the following:
Malicious Type | SO Type | Detection Name |
---|---|---|
File | Consolidated SO | CSO_SUSPICOIOUS_FILE.UMXX |
File | User-defined SO | USR_SUSPICOIOUS_FILE.UMXX |
URL | Consolidated SO | CSO_SUSPICOIOUS_URL.UMXX |
URL | User-defined SO | USR_SUSPICOIOUS_URL.UMXX |