Comodo Internet Security

• Introduction To Comodo Internet Security
  • Special Features
  • System Requirements
  • Installation
    • CIS Premium – Installation
    • CIS Pro - Installation And Activation
    • CIS Complete - Installation And Activation
    • Activating CIS Pro/Complete Services After Installation
      • Activating Your License
      • Activating Your Guarantee Coverage
      • Renewal Or Upgrading Your License
  • Starting Comodo Internet Security
  • The Main Interface
    • The Home Screen
    • The Tasks Interface
    • The Widget
    • The System Tray Icon
  • Understanding Security Alerts
• General Tasks – Introduction
  • Scan And Clean Your Computer
    • Run A Quick Scan
    • Run A Full Computer Scan
    • Run A Rating Scan
    • Run A Custom Scan
      • Scan A Folder
      • Scan A File
      • Create, Schedule And Run A Custom Scan
  • Instantly Scan Files And Folders
  • Processing Infected Files
  • Manage Virus Database And Program Updates
  • Manage Quarantined Items
  • View CIS Logs
    • Antivirus Logs
      • Filtering Antivirus Logs
    • Firewall Logs
      • Filtering Firewall Logs
    • Defense+ Logs
      • Filtering Defense+ Logs
    • Alerts Logs
      • Filtering Alerts Displayed Logs
    • Tasks
      • Filtering Tasks Launched Logs
    • Configuration Changes
      • Filtering Configuration Changes Logs
  • Manage CIS Tasks
  • View Active Internet Connections
  • View Active Process List
• Firewall Tasks – Introduction
  • Allow Or Block Internet Access To Applications Selectively
  • Stealth Your Computer Ports
  • Manage Network Connections
  • Stop All Network Activities
  • Advanced Firewall Settings
• Sandbox Tasks – Introduction
  • The Virtual Kiosk
    • Starting The Virtual Kiosk
    • The Main Interface
    • Running Browsers Inside The Virtual Kiosk
    • Opening Files And Running Applications Inside The Virtual Kiosk
    • Configuring The Virtual Kiosk
    • Closing The Virtual Kiosk
  • Run An Application In The Sandbox
  • Reset The Sandbox
• Advanced Tasks – Introduction
  • Create A Rescue Disk
    • Downloading And Burning Comodo Rescue Disk
  • Remove Deeply Hidden Malware
  • Submit Files
  • Identify And Kill Unsafe Running Processes
• Advanced Settings
  • General Settings
    • Customize User Interface
    • Configure Program And Virus Database Updates
    • Log Settings
    • Manage CIS Configurations
      • Comodo Preset Configurations
      • Importing/Exporting And Managing Personal Configurations
  • Security Settings
    • Antivirus Settings
      • Real-time Scanner Settings
      • Scan Profiles
      • Exclusions
    • Defense+ Settings
      • HIPS Behaviour Settings
      • Active HIPS Rules
      • HIPS Rule Sets
      • Protected Objects
        • Protected Files
        • Blocked Files
        • Protected Registry Keys
        • Protected COM Interfaces
      • Behavior Blocker
        • The Sandbox - An Overview
          • Unknown Files - The Auto - Sandboxing And Scanning Processes
      • Configure The Sandbox
    • Firewall Settings
      • Firewall Behavior Settings
      • Application Rules
      • Global Rules
      • Firewall Rule Sets
      • Network Zones
        • Network Zones
        • Blocked Zones
      • Port Sets
    • Manage File Rating
      • File Rating Settings
      • Trusted Files
      • Unrecognized Files
      • Submitted Files
      • Trusted Vendors List
• Comodo GeekBuddy
  • Overview Of Services
  • Activation Of Service
  • Launching The Client And Using The Service
  • Accepting Remote Desktop Requests
  • Chat History
  • Using Issue Tracker
  • Uninstalling Comodo GeekBuddy
• TrustConnect Overview
• Comodo Dragon
• Comodo BackUp
• Appendix 1 CIS How To... Tutorials
  • Enabling / Disabling Security Components Easily
  • Setting Up The Firewall For Maximum Security And Usability
  • Blocking Internet Access While Allowing Local Area Network (LAN) Access
  • Setting Up The HIPS For Maximum Security And Usability
  • Setting Up The Behavior Blocker For Maximum Security And Usability
  • Password Protect Your CIS Settings
  • Reset Forgotten Password (Advanced)
  • Running An Instant Antivirus Scan On Selected Items
  • Creating An Antivirus Scanning Schedule
  • Running Untrusted Programs Inside Sandbox
  • Running Browsers Inside Sandbox
  • Running Untrusted Programs Inside Virtual Kiosk
  • Running Browsers Inside The Virtual Kiosk
  • Restoring Incorrectly Quarantined Item(s)
  • Submitting Quarantined Items To Comodo For Analysis
  • Enabling File Sharing Applications Like BitTorrent And Emule
  • Blocking Any Downloads Of A Specific File Type
  • Disabling Behavior Blocker And Auto-Sandboxing On A Per-application Basis
  • Switching Between Complete CIS Suite And Individual Components (just AV Or FW)
  • Switch Off Automatic Antivirus And Software Updates
  • Suppressing CIS Alerts Temporarily While Playing Games
  • Renewing Your License
• Appendix 2 - Comodo Secure DNS Service
  • Router - Manually Enabling Or Disabling Comodo Secure DNS Service
  • Windows XP - Manually Enabling Or Disabling Comodo Secure DNS Service
  • Windows 7 / Vista - Manually Enabling Or Disabling Comodo Secure DNS Service
• Appendix 3 - Glossary Of Terms
• About Comodo Security Solutions

Filtering 'Alerts Displayed' Logs

Comodo Internet Security allows you to create custom views of all logged events according to user defined criteria. You can use the following types of filters:

• Preset Time Filters

• Advanced Filters
  

Preset Time Filters

Clicking on the handle at the bottom enables you to filter the logs for a selected  time period:

• Today - Displays all logged events for today.

• Current Week - Displays all logged events during the current week. (The current week is calculated from the Sunday to Saturday that holds the current date.)

• Current Month - Displays all logged events during the month that holds the current date.

• Entire Period - Displays every event logged since Comodo Internet Security was installed. (If you have cleared the log history since installation, this option shows all logs created since that clearance).

• Custom Filter – Enables you to select a custom period by choosing the 'From' and 'To' dates under 'Please Select Period'.

Advanced Filters

You can further refine the displayed events according to specific filters. Following are available filters for 'Alerts' logs and their meanings:

• Advice: Displays only the log of alerts that matches the advice entered

• Answer: Displays only the log of alerts that were answered by you with the selected response

• Answered Displays only the log of alerts that were answered on a selected date and time

• Description: Displays only the log of alerts that matches the description entered

• Flags: Displays only the log of alerts based on the selected flags set for the corresponding events

• Treat As: Displays only the log of alerts based on their 'Treat As' response you entered in the pop-up alert

• Type: Displays only the log of alerts of selected type. They can be Antivirus, Firewall or Defense+ (HIPS, Behavior Blocker or Auto-Sandbox) alerts.

To configure Advanced Filters for Alerts Displayed

1. Click the funnel button  from the title bar. The Advanced Filter interface for 'Alerts' logs will open.

2. Select the filter from the 'Advanced Filter' drop-down and click 'Add' to apply the filter.

You have 7 categories of filters that you can add. Each of these categories can be further refined by either selecting or deselecting specific filter parameters or by the user typing a filter string in the field provided. You can add and configure any number of filters in the 'Advanced Filter' dialog.

Following are the options available in the 'Add' drop down menu:

1. Advice: The 'Advise' option enables you to filter the alerts based on advices given by CIS in the alert. Selecting the 'Advice' option displays a drop-down field and text entry field.

1. Select 'Contains' or 'Does Not Contain' option from the drop-down menu.

2. Enter the text or word as your filter criteria.

For example, if you select 'Contains' option from the drop-down field and enter the phrase 'you can safely allow this request' in the text field, then only the entries containing 'you can safely allow this request' in the 'Advise' column will be displayed.

2. Answer: The 'Answer' option enables you to filter the alerts based on how you answered for the alerts. Selecting the 'Answer' option displays a drop-down box and a set of specific filter parameters that can be selected or deselected.

1. Select 'Equal' or 'Not Equal' option from the drop down menu. 'Not Equal' will invert your selected choice.

2. Now select the check-boxes of the specific filter parameters to refine your search. The parameter available are:

• Unknown

• Allow

• Deny

• Treat As

• Sandbox

• Time-out

• Disinfect

• Quarantine

• Skip Once

• Add to Exclusions

• Add to Trusted Files

• False Positive

• Skip

• Terminate

• Keep inside Sandbox

• Run outside Sandbox

For example, if you select 'Equal' from the drop-down and select 'Add to Exclusions' checkbox, only the log of Antivirus alerts for which you answered as 'Disregard' > 'Disregard and Exclude' will be displayed.

3. Answered: The Answered option enables you to filter the log based on the date you answered the alerts. Selecting the 'Answered' option displays a drop-down box and date entry field.

1. Select any one of the following option the drop-down box.

• Equal

• Not Equal

2. Enter the date by selecting it from the calender displayed by clicking the drop-down arrow.

For example, if you select 'Equal' from the drop-down and select '12/04/2012' , only the log of alerts answered on 12/04/2012 will be displayed.

4. Description: The Description option enables you to filter the log based on the description of the attempt displayed in the alert. Selecting the 'Description' option displays a drop-down field and text entry field.

1. Select 'Contains' or 'Does Not Contain' option from the drop-down menu.

2. Enter the text or word as your filter criteria.

For example, if you select 'Contains' from the drop-down and enter 'connect to the Internet', only the log entries of Firewall alerts that contain the phrase 'connect to the Internet' in the description, will be displayed.

5. Flags: The 'Flags' option enables you filter the entries based on the flags set for the kinds of actions against the event triggered by the file. Selecting the 'Flags' option displays a drop down menu and a set of specific filter parameters that can be selected or deselected.

1. Select 'Equal' or 'Not Equal' option from the drop down menu. 'Not Equal' will invert your selected choice.

2. Now select the check-boxes of the specific filter parameters to refine your search. The parameter available are:

• Remember

• Restore Point

• Submit

• Trusted Publisher

6. Treat As: The 'Treat As' enables you to filter the log entries based on their 'Treat As' response you entered in the pop-up alert. Selecting the 'Treat As' option displays a drop-down menu and text entry field.

1. Select 'Contains' or 'Does Not Contain' option from the drop-down menu.

2. Enter the text or word as your filter criteria

For example, if you have chosen 'Contains' from the drop-down and entered 'Installer' in the text field, only the entries containing the phrase 'Installer' in the 'Treat As' column will be displayed.

7. Type: The 'Type' option enables you to filter the entries based on the component of CIS that has triggered the alert. Selecting the 'Type' option displays a drop down menu and a set of specific alert types that can be selected or deselected.

1. Select 'Equal' or 'Not Equal' option from the drop down menu. 'Not Equal' will invert your selected choice.

2. Now select the check-boxes of the specific filter parameters to refine your search. The parameter available are:

• Antivirus Alert

• Firewall Alert

• Defense+ Alert

• Behavior Blocker Alert

For example, if you select 'Equal' from the drop-down and select 'Antivirus Alerts' checkbox, only the log of Antivirus alerts will be displayed. 

Note: More than one filter can be added in the 'Advanced Filter' pane. After adding one filter type, select the next filter type and click 'Add'. You can also remove a filter type by clicking the 'X' button at the top right of the filter pane.

• Click 'Apply' for the filters to be applied to the 'Alerts' log viewer. Only those entries selected based on your set filter criteria will be displayed in the log viewer.