OfficeScan 10.6 Administrator's Guide - Trend Micro™ Online Help

To modify the content of the notification message:
PATH: NOTIFICATIONS > CLIENT USER NOTIFICATIONS
1. Click the Behavior Monitoring Policy Violations tab.
2. Modify the default message in the text box provided.
3. Click Save.
Behavior Monitoring Logs
Using Behavior Monitoring
Clients log unauthorized program access instances and send the logs to the server. A
client that runs continuously aggregates the logs and sends them at specified intervals,
which is every 60 minutes by default.
To keep the size of logs from occupying too much space on the hard disk, manually
delete logs or configure a log deletion schedule. For more information about managing
logs, see Managing Logs on page 12-30.
To view Behavior Monitoring logs:
PATH: LOGS > NETWORKED COMPUTER LOGS > SECURITY RISKS
NETWORKED COMPUTERS > CLIENT MANAGEMENT
1. In the client tree, click the root domain icon
specific domains or clients.
to include all clients or select
2. Click Logs > Behavior Monitoring Logs or View Logs > Behavior Monitoring
Logs.
3. Specify the log criteria and then click Display Logs.
4. View logs. Logs contain the following information:
• Date/Time unauthorized process was detected
• Computer where unauthorized process was detected
• Computer’s domain
• Violation, which is the event monitoring rule violated by the process
• Action performed when violation was detected
• Event, which is the type of object accessed by the program
7-11