EndpointFileDetectionEventModelDetectionInfo

Provides details about the detection that occurred on an endpoint.

NameDescriptionTypeAdditional Information
FileName

The name of the detected file.

string

None.

FilePath

The path where the file was located on the endpoint.

string

None.

FileSize

The size of the file, in bytes.

integer

None.

FileMD5

The MD5 hash of the file's content.

string

None.

FileSHA256

The SHA256 hash of the file's content.

string

None.

Determination

The Webroot classification of the file. Most common values in the context of the endpoint file detection event type will be "B" (Bad) or "U" (Undetermined).

string

None.

MalwareGroup

The malware group which the file was classified in.

string

None.