OfficeScan 10 Administrator's Guide - Online Help Home - Trend Micro

Trend Micro OfficeScan 10 Service Pack 1 Administrator’s Guide
5-70
To modify the content of the notification message:
PATH: NOTIFICATIONS > CLIENT USER NOTIFICATIONS
1. Click the Behavior Monitoring Policy Violation tab.
2. Modify the default messages in the text box provided.
3. Click Save.
Behavior Monitoring Logs
Clients log unauthorized program access instances and send the logs to the server. A
client that runs continuously aggregates the logs and sends them every 60 minutes, by
default.
To keep the size of logs from occupying too much space on the hard disk, manually
delete logs or configure a log deletion schedule. For more information about managing
logs, see Managing Logs on page 8-16.
To view behavior monitoring logs:
PATH: LOGS > NETWORKED COMPUTER LOGS > SECURITY RISKS > VIEW LOGS > BEHAVIOR
MONITORING LOGS
NETWORKED COMPUTERS > CLIENT MANAGEMENT > LOGS > BEHAVIOR MONITORING
LOGS
1. Specify log criteria and click Display Logs.
2. View logs. Logs contain the following information:
• Date/Time unauthorized process was detected
• Computer where unauthorized process was detected
• Event monitoring rule violated by the process
• OfficeScan action performed when violation was detected
• Type of object accessed by the program
• Risk level of the unauthorized program
• Program, which is the unauthorized program
• Operation, action performed by the unauthorized program
• Target, which is the process that was accessed
• Policy name of the event monitoring rule