Persistent filters in Threat Case View | Detailed Info On Archive Content
i have a suggestion for improving the GUI usability:
(1) Persistent Filters | Separate Details window
Module: Endpoint Protection
View: Threat Cases
Viewing the list of current threat cases when i apply a filter (e.g. by priority and status) and click on a case, the details for the case are opened in the current browser window.
Currrently it does not seem to be possible to return to the threat case overview without resetting the filters. This makes the threat case view pretty unhandy. If I'm wrong, please correct me.
Suggestion: make the filters persistent or open the case details in a new browser tab when clicking on a case.
(2) No/few information on malicious files in archives
When malicious content is found in an archive (zip, tar.gz), the corresponding threat case is almost empty (only the archive name and the signature name of the finding is reported).
It would be useful to at least have the name/path of the malicious file in the archive and its hash sum.