MetaFlows Network Antivirus: Worst MIME Types (05/14/2017 11:22am to 05/21/2017 11:22am UTC)

These are the MIME types associated with malware detected by MetaFlows. The severity is derived from what class of malware is detected. The True Positive Rate (tpr) is calculated with respect to the global count of the same MIME associated with any file transfer or email attachment, whether or not it caused a compromise. This measures how dangerous a MIME type is.

The table below the bubble graph shows the sortable raw data. The first column is the invariant extracted from the events. If you have an account with MetaFlows, you can click on certain invariants to see if your sensors have detected it. The other columns should be self-explanatory. Hovering over a bubble or set of overlapping bubbles shows the raw data represented by the bubble(s) selected. This selection is sticky so that you can go to the table and inspect the data or click on the links within the table. To see all rows in the table, click outside any bubble.

MIME Type Global True Positives (tph) Global Hits (gh) Avg Priority (avgp) Global Priority (totp) Global True Positive Rate (tpr = tph / gh) Severity (avgp * tpr) Prevalence (totp * tpr) Domains
Like this
content:
Like what you see? Want to learn more about Malware Detection?
Start Free 14-Day Trial Schedule a Demo
Follow us:
MetaFlows on LinkedIn