hostrep

[Global]

State=1

RiskHalfLife=21600# a risk of 100 will be scored as 50 after this duration, and 25 after twice this duration...

RiskTTL=86400# a risk older than this duration will be ignored

[HostrepMonitored]# List of monitored hosts

network_internals

[HostrepExcluded]# List of hosts which won't be monitored, even if present if the list of monitored hosts.

[Ignorelist]# list of alarms which won't emit any risks.

protocol:1

protocol:67

[Alarm]

Minor=2# risk for minor alarms

Major=10# risk for major alarms

[Sandboxing]

Suspicious=2# risk for sandboxing=suspicious

Malicious=50# risk for sandboxing=malicious

Failed=0# risk for sandboxing=failed

[Antivirus]

Infected=100# risk for virus=infected

Unknown=2# risk for virus=unknown

Failed=0# risk for virus=failed