Analyzer Detection Method type

[TimLin]

Hello,

What is mean the Analyzer Detection Method display OutlookOA?

Thank you.

[Former Member]

Hello,

It is the way by which  Malicious file was detected , either from OAS, ODS or through email scanner.

If you scroll down you in the image which you have provided you will be able to see the OAS, ODS or EmailScanner.

Mostly this was captured by email scanner.

Was my reply helpful?
If you find this post useful, Please give it a Kudos! l Also, Please don't forget to select "Accept as a solution" if this reply resolves your query!

[AdithyanT]

Hi @TimLin 

Thank you for your post! Just adding my 2p to above.

OutlookOA - Outlook On-Access. This detection is made by Endpoint Security when the following option is enabled by policy under Endpoint Security Threat Prevention --> On-Access Scan.

I have the following excerpt from product documentation below for your kind reference:

Detect suspicious email attachments

Scans and detects suspicious files saved to disk by email client applications, such as Outlook or Windows Mail. This option enables aggressive email-attachment detection using heuristic signatures, which detect most executables, scripts, and .jar files by policy, rather than looking for malware. Select this option to scan all downloads, including archives and their contents, and MIME-encoded files. Archives are scanned 2 levels deep. NOTE: This option also prevents executables and scripts downloaded by email clients from running. If an email client update downloads an executable, the update might not work. Although this option doesn't affect attachments downloaded from browser-based email, on-access scan examines those downloads. Disabling this option doesn't prevent the on-access scanner from scanning email attachments — it just disables the additional heuristic signatures. (Disabled by default)

I sincerely hope this information helps!