Verdict Adjustment

Step #1 - Open /home/sandbox/sandbox/transform.cfg in a text editor

Step #2 - Modify the configuration by adding or modifying the properties on this page

Step #3 - Save the file and restart the sandbox service

Disable Threat indicators

One or more Threat indicators can be disabled, so those will not be evaluated during the verdict calculation process.

transform.cfg
Copy
Property nameDefault valueDescription
ignoreVerdictForMatchingConsumerIDs-IDs to disable, separated by comma

Escalate Threat indicators

One or more Threat indicators can be escalated, so those will be evaluated as Malicious during the verdict calculation process.

transform.cfg
Copy
Property nameDefault valueDescription
escalateVerdictToMaliciousForMatchingConsumerIDs-IDs to escalate, separated by comma
Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard
Next to read:
YARA Rules

See the "Technical Datasheet" for a complete list of features: https://docs.opswat.com/filescan/datasheet/technical-datasheet

On This Page
Verdict AdjustmentDisable Threat indicatorsEscalate Threat indicators