> For the complete documentation index, see [llms.txt](https://docs.enginsight.com/docs/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.enginsight.com/docs/manual/english/platform-usage/hosts/advanced-persistent-threats/scans/scan-detail-view.md). # Scan: Detail View Click a list item in the [scan overview](/docs/manual/english/platform-usage/hosts/advanced-persistent-threats/scans.md#scans-overview) to open the respective scan detail view.

*** ## Left Side: Scan This section summarizes all information from the scan overview again. *** ## Right Side: Detection Here you can find a detailed breakdown of all active threats found during the scan.

### Navigation Click the **Text Search** field above the list and enter a search term of your choice to find specific list items more quickly. Click the **Refresh** icon above the list to update all list items. Scroll down the list or adjust the number of results shown per page ![](https://2423388680-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FV7OrHgKXA0t1jankQBYf%2Fuploads%2FfjKACCt2SKXcFd3S7Xb5%2FEnginsight-EN-Results%20per%20Page.jpg?alt=media\&token=e1650160-7a41-4965-aaca-6975db758dbe) to view additional entries. Use the page navigation ![](https://content.gitbook.com/content/V7OrHgKXA0t1jankQBYf/blobs/wnxVw06QGoSsYjhwMJRF/Enginsight-Seitennavigation-2.jpg) to switch between pages. #### Filtering the List Click the **Filter** icon above the list to filter the list by predefined parameters.

Available filters

Parameter	Type	Description
Host	String	Filter by a specific host on which an APT was detected, or exclude it from the results. All available hosts are shown.
Plan	String	Filter by a specific plan to which the rule through which the APT was detected is assigned, or exclude it from the results. All available plans are shown.
Rule	String	Filter by a specific rule through which the APT was detected, or exclude it from the results. All available rules are shown.
Severity	String	Filter by a specific severity assigned to the respective APT, or exclude it from the results. All available severity levels are shown.

#### Sorting List Items Click the **Sort** icon next to a column name in the table header to sort by that column in ascending or descending order . Click the sort icon above the list to adjust the priority of the applied sorting. A menu opens that shows all columns by which the list is currently sorted. Drag and drop the shown items to change the sorting priority. ### Scan: Details The scan details are structured as a table. The following information is shown:

Column	Description
Severity	Shows the severity of the detected APT. The following severity levels can be shown: Critical: The APT has a very high criticality. High: The APT has a high criticality. Medium: The APT has a medium criticality. Low: The APT has a low criticality.
Threat	Shows the file path that contains the APT. Click a file path to navigate to the respective active threat detail view.
Rule	Shows the rule through which the APT was detected. Click the name of a rule to navigate to the respective edit view.
Detected at	Shows the date and time when the APT was detected.
Actions	Add the detected APT to the whitelist. Click Add whitelist. A new window opens where you can directly create a new whitelist entry.

*** ## Adding a Whitelist Entry Click **Add Whitelist** at the end of a list element to open a new window where you can directly create a new whitelist entry for the detected APT.

Click **Add Whitelist** after you configured all settings to save and create the new whitelist entry. Click **Back** to return to the overview. {% hint style="danger" %} **Please note**: If you leave this view without clicking **Add Whitelist**, all configured settings are permanently lost! {% endhint %} ### General Settings

Option	Description
Name	Enter a meaningful name for the whitelist entry.
Description	Provide a more detailed description for the whitelist entry. This field is optional.

### Assigned Hosts Define the hosts for which the whitelist entry should apply. {% hint style="info" %} This field is already prefilled with the host on which the selected APT was detected. {% endhint %} Click the **Hosts** field to expand a list of all available hosts, and select one or more hosts. Alternatively, use free-text input to find hosts in the list more quickly.\ \ Click the **Remove** icon next to an added host to remove it from the **Hosts** field. ### File Paths Define file paths to which the whitelist entry should apply.

Option	Description
File Path	Enter a file path. This field is already prefilled with the file path in which the selected APT was detected. You can also use wildcards (*) here.
Add Field	Click Add Field to add the file path to the whitelist entry and show another field for specifying an additional file path.
Delete	Click the Delete icon next to an added file path to remove the respective path from the rule set.

***