4.6.2.1File Hashes

File hashes can help you quickly respond to false positive and false negative security events, thereby improving O&M efficiency.

Go to Policies > Detection Policies > File Hashes, as shown in the following figure.

You can set the action to take for specified files. Supported actions are Alert and Fix, Alert, and Allow.

Alert and Fix: A false negative threat will be fixed and an alert will be given for the threat.

Alert: Only an alert is given for the threat.

Allow: A false positive threat is allowed.

4.6.2.2WebShell Directories

You can specify web directories for detecting web shells on web servers.