Question User Interface Questions for 8.47

[duskdevilza]

Hi everyone,

I have some user interface questions I was hoping I could get help with.

1. All the regional settings in my system are set to Australia (DD/MM/YEAR), but the 'Timestamp' column in the 'user log' and 'whitelist' still show the date as MM/DD/YEAR instead of DD/MM/YEAR. Is there a way I can fix this? Generally speaking apps either use the systems regional settings or allow you to customise your layout. It looks like neither is available or working.

2. When I open the user log to review whats going on, is there a way to refresh the display to get the latest log information without having to close and re-open the GUI interface? Essentially for real-time troubleshooting, its handy to click a button to refresh or even have the option for the log to 'tail' than it is to close and open every time to get the latest info.

3. Whats the easiest/fastest way to find out who a file is published/signed by? From what I can tell, it only looks like you can see this in the 'WhitelistCloud' section. If this is the case, thats fine. It would be handy to be able to copy the info about a file in that section so that it can be readily for rule creation. Perhaps an additional column in the whitelist section for publisher could be possible?

I searched the forum and read the user guide without much luck.

Thanks very much

 

[Bot]

Hi everyone,

I have some user interface questions I was hoping I could get help with.

1. All the regional settings in my system are set to Australia (DD/MM/YEAR), but the 'Timestamp' column in the 'user log' and 'whitelist' still show the date as MM/DD/YEAR instead of DD/MM/YEAR. Is there a way I can fix this? Generally speaking apps either use the systems regional settings or allow you to customise your layout. It looks like neither is available or working.

2. When I open the user log to review whats going on, is there a way to refresh the display to get the latest log information without having to close and re-open the GUI interface? Essentially for real-time troubleshooting, its handy to click a button to refresh or even have the option for the log to 'tail' than it is to close and open every time to get the latest info.

3. Whats the easiest/fastest way to find out who a file is published/signed by? From what I can tell, it only looks like you can see this in the 'WhitelistCloud' section. If this is the case, thats fine. It would be handy to be able to copy the info about a file in that section so that it can be readily for rule creation. Perhaps an additional column in the whitelist section for publisher could be possible?

I searched the forum and read the user guide without much luck.

Thanks very much

You are most likely running into product-specific UI limitations rather than a Windows regional settings problem.

1) Date format in the log and whitelist

If the Timestamp column still shows MM/DD/YYYY even though Windows is set to Australia, that usually means the application is using its own fixed date format instead of the system locale.

• If there is no date-format option in the program settings, there may be nothing to change from the user side
• Some security apps hardcode US-style formatting in certain tables or logs
• If the rest of Windows applications follow DD/MM/YYYY, that points more toward the app UI than your regional configuration

A few low-risk things to verify:

• Confirm Settings > Time & Language > Language & Region is set correctly
• Check Administrative language settings as some older applications read from legacy regional settings
• Restart the application after changing locale settings, or reboot once if you have not already

If it still does not change, I would treat that as a product limitation or bug rather than a misconfiguration.

2) Refreshing the user log without reopening the GUI

If there is no visible Refresh, Reload, or auto-update option in the log window, then the interface may simply not support live refresh.

In general, for this kind of UI:

• Some products only load the log when the window opens
• Some refresh only when switching tabs
• Some keep writing to the backend log file but do not update the visible table in real time

Simple things worth trying:

• Press F5 while the log window is active
• Right-click inside the log pane to see if there is a hidden refresh menu
• Switch away from the tab and back again
• Check whether the product also writes to a text log or Windows Event Log for live monitoring

If none of that works, then closing and reopening the GUI may unfortunately be the only available method. That would again suggest a UI feature gap rather than something you are missing.

3) Finding the publisher/signer of a file

The fastest way is usually outside the product, unless that product explicitly exposes signer details in all relevant views.

Windows built-in method

• Right-click the file
• Open Properties
• Check the Digital Signatures tab
• Select the signature and view the certificate details

That is usually the quickest reliable way to see who signed the file, if the file is actually signed.

PowerShell method

You can also use PowerShell:

• Get-AuthenticodeSignature "C:\Path\To\File.exe"

That will show signature status and signer certificate information.

Important limitation

• A valid signature does not automatically mean the file is safe
• Unsigned does not automatically mean malicious
• Some malware is signed, and some legitimate tools are unsigned

So signer information is useful for identification and rule creation, but it should not be treated as a security verdict by itself.

About WhitelistCloud and adding publisher info

If the publisher is only visible in WhitelistCloud, then that is probably just how the current UI is designed. Your suggestion to expose Publisher as a column in the normal whitelist view sounds reasonable and would improve rule management.

Likewise, being able to copy:

• file path
• hash
• publisher
• certificate subject

would make manual rule creation much easier in real-world use.

Practical conclusion

Based on what you described:

• The date format issue sounds like an application-side UI limitation
• The log window likely does not support live refresh unless there is a hidden refresh action
• The easiest way to check publisher information is usually via Windows file properties or PowerShell

If the product has an active support thread here, the most useful next step would be to post these as feature requests and possible UI bugs, because they sound valid and practical rather than user error.

 

[duskdevilza]

Thank you for the auto-generated-response. awaiting further human reponses with further insight after approval process has completed.