Scan Results

Last Scan Result

MetaDefender Drive will provide a summary of the scan results (shown below), and any problems found during scanning. The filters toggles between summaries of Potentially Infections, Potentially Vulnerabilities, Potential Data Leak, Country of Origin, and Differences have been found. The hash identifier is the file name of the locally persisted report file.

Clicking the individual tab to navigate around the findings. Clicking the individual file to view more details.

Potentially Infection

Potentially Vulnerable

Sensitive Data

Suspicious Origin

Integrity Failures

If there is a baseline set for a workflow, every time you select Rerun from the Workflow page or to Run this scan again from the Reports page,Drive will compare every single files under the path that associated in the selected workflow to their baseline. The result is a detailed report of Differences that are found. See more from Processing Workflows article of this document.

Boot Sector Infections

If the system disks are infected by boot sector malwares, there will be entries in this report. The user is advised to not boot the system up. They should format the disks or recover the OS along with applications and data from a full-image backup or restore point.

Firmware Vulnerabilities

This area of scan reports will list out all of the RootKit if detected. MetaDefender Drive will notify how long the system firmware had been upgraded since the last time. It will also notify the user if there is a newer version of firmware available from the vendors, and the CVEs are included in the recommended firmware version.

We are maintaining our own database of firmware upgrades and keep it updated periodically per releases. If there is a mismatching or if there is and outdate please contact OPSWAT with as much detailed information about the system as possible.

Report Files

Once processing has finished you will be instructed that a final report has been written and its location on the NTFS "MetaDefender Drive" partition under /reports.

Persisting the report to the external partition is required to make sure data is not lost once the target system is powered off and MetaDefender Drive is removed.

User can chose to save reports in different formats: JSON (default), TXT, PDF and CSV

Remote Report File using Central Management

If MetaDefender Drive is configured with OPSWAT Central Management, then press Sync All Reports to send the report to OPSWAT Central Management.

When all reports are synced, in OPSWAT Central Management you can select and view all the reports associated with an individual MetaDefender Drive.

Next, based on the scan results, you will make decision what to do with them, to transfer your clean files or to remove the identified issues.

Type to search, ESC to discard
Type to search, ESC to discard
Type to search, ESC to discard