Alert in Sandblast agent

[Blason_R]

Hello ,   In sandblast agent in Anti ransomware when It detects ransomware and restore the files the pop up comes "Its notified to the Administrator." Where it sends alert? And Can we set alert for the same in smart endpoint 77.30.03? and where I can see the forensic reports if I do not have smart event?

[Thomas_Werner]

So the report one is a bit tricky with the different version:

SandBlast Agent and report compatibility matrix

Version	TE Report	SBA Forensic Report
SmartLog R77.30.02 or higher	Yes	Yes
R77.30 SE	No	No
R77.30 NGSE with special HF	No	Yes
R80.10 SE	Yes	Yes

So in your case the simple anser is "in SmartLog" 🙂

EMail alerts can only be issued by setting up an "automatic reaction" in SmartEvent.

Regards Thomas