Reply to thread

Message

<blockquote data-quote="ForgottenSeer 89360" data-source="post: 918770">I haven’t tested SEP recently and there might be a change. If it has remained the same, Download Insight requests information from Symantec and calculates an overall safety score of the file, based on<ul>
<li data-xf-list-type="ul">When it was first seen</li>
<li data-xf-list-type="ul">Who signed it</li>
<li data-xf-list-type="ul">How many users downloaded the file</li>
<li data-xf-list-type="ul">And other factors that Symantec before has said are “secret sauce”. 
They were saying in the past that they also calculate safety score for every system, based on how many infections are discovered and files on heavily infected systems, are not that trustworthy.</li>
</ul>The more you increase the slider in SEP, the higher a file will need to score to remain on the system. This means false positives become more and more likely.This is related information:[URL unfurl=&quot;true&quot;]https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-protection/all/Using-policies-to-manage-security/preventing-and-handling-virus-and-spyware-attacks-v40739565-d49e172/how-uses-symantec-insight-to-make-decisions-about-v45204303-d49e3040.html[/URL]</blockquote>

[QUOTE="ForgottenSeer 89360, post: 918770"] I haven’t tested SEP recently and there might be a change. If it has remained the same, Download Insight requests information from Symantec and calculates an overall safety score of the file, based on [LIST] [*]When it was first seen [*]Who signed it [*]How many users downloaded the file [*]And other factors that Symantec before has said are “secret sauce”. They were saying in the past that they also calculate safety score for every system, based on how many infections are discovered and files on heavily infected systems, are not that trustworthy. [/LIST] The more you increase the slider in SEP, the higher a file will need to score to remain on the system. This means false positives become more and more likely. This is related information: [URL unfurl="true"]https://techdocs.broadcom.com/us/en/symantec-security-software/endpoint-security-and-management/endpoint-protection/all/Using-policies-to-manage-security/preventing-and-handling-virus-and-spyware-attacks-v40739565-d49e172/how-uses-symantec-insight-to-make-decisions-about-v45204303-d49e3040.html[/URL] [/QUOTE]

Verification