Vault SOC
Incidents
SCM-WF-772MediumContainedTrue Positive96%

WildFire malicious verdict – download blocked at HQ-FW-01

Affected: ENG-WS-066NGFWUpdated 09:50 PT · Owner AI SOC

AI summary

Drive-by download blocked inline; no execution on endpoint.

Verdict

True Positive96%

Customer-approved model · AWS GovCloud (us-gov-west-1) · inside Halcyon's account. Time to verdict 47s.