The past week, I've noticed two good programs stay set to Monitor. I am keeping them set to Monitor for a test to see WSA response time on classifiing unknowns. One is the Corsair Headset Utility and another is Sound Blaster Cinema 2. Both downloaded from genuine manufacturer's pages.
Anyhow, my question is, how long does it normally take for the WSA team to check unknowns and mark them accordingly? What is WSA response time? I know the answer will probably be vague at best because it is hard to know, but maybe through other people's experience or maybe an offical response?
Thanks!
Answer
How long does it take for an item to get checked?
Best answer by DanP
Our focus is on malware, so in the case of legitimate files there are certain factors that will cause them to be classified more quickly, such as being seen by a large number of our customers - the more common files as @ mentioned.
-Dan
-Dan
i THINK that when a file is marked as unknown, it will remain in Monitor status until enough data about the behavior of the flle has been collected. For files that are very common, in all or a majority of computers, the process of determing the file good and thus moving off of Monitored may be pretty quick, just a few days.
Less common files may take a few weeks or longer i THINK. I am not positive on this.
You also can submit a Trouble Ticket to have Webroot Support take a look at those specific files to get them whitelisted faster than waiting for the Cloud to make the determination on its own.
+35- OpenText Employee
- Answer
Our focus is on malware, so in the case of legitimate files there are certain factors that will cause them to be classified more quickly, such as being seen by a large number of our customers - the more common files as @ mentioned.
-Dan
-Dan
Webroot Threat Research
Login to the community
No account yet? Create an account
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.