Date Accessed and Date Modified time stamps are modified after Remediation Scan
Last Modified: 2023-05-04 09:48:57 Etc/GMT
Affected Products
Languages:
This article is available in the following languages:
Trellix CEO, Bryan Palma, explains the critical need for security that’s always learning.
As per Gartner, "XDR is an emerging technology that can offer improved threat prevention, detection and response."
Trellix announced the establishment of the Trellix Advanced Research Center to advance global threat intelligence.
Trellix Advanced Research Center analyzes threat data on ransomware, nation-states, sectors, vectors, LotL, MITRE ATT&CK techniques, and emails.
As of May 14, 2024, Knowledge Base (KB) articles will only be published and updated in our new Trellix Thrive Knowledge space.
Log in to the Thrive Portal using your OKTA credentials and start searching the new space. Legacy KB IDs are indexed and you will be able to find them easily just by typing the legacy KB ID.
Date Accessed and Date Modified time stamps are modified after Remediation Scan
Technical Articles ID:
KB94104
Last Modified: 2023-05-04 09:48:57 Etc/GMT Environment
Data Loss Prevention (DLP) Discover - all supported versions For supported environments, see KB90598 - Supported platforms for Data Loss Prevention Discover Server. Problem
A Remediation Scan has been run on a file share using a rule to classify files. The scan results in files being classified. After the files are classified, the Date Accessed and Date Modified time stamps are modified. The Solution
This behavior is expected. When DLP Discover classifies a file, the file is modified as the classification is written to it. As a result, the Date Accessed and Date Modified time stamps are modified. The original time stamps are not restored. Other scan types that only analyze content within the file restore the original time stamps because the file isn't being modified. NOTE: The Date Accessed and Date Modified time stamps can also be modified with other Remediation Scans. These other Remediation Scans use rule reactions that modify files, such as Apply RM Policies and Remove Automatic Classification. To submit a new product idea, go to the Enterprise Customer Product Ideas page.
Click Sign In and enter your ServicePortal User ID and password. If you do not yet have a ServicePortal or Community account, click Register to register for a new account on either website. For more information about product ideas, see KB60021 - How to submit a Product Idea. Affected ProductsLanguages:This article is available in the following languages: |
|