The Known Files tab shows all files from this notification that are known to the Carbon Black App Control Server. The table includes (either by default or customization) all fields from the File Catalog.

You can add other fields that provide information about the file from the network security device, as shown on the Total Files tab. The Action menu has the same options as the Total Files tab menu, but uses file information from the Carbon Black App Control inventory rather than the notification where available.

You can modify Correlation Details options on this page to customize the Carbon Black App Control information correlated with the notification. Your choices here affect all pages that display correlation options.