Set scan schedules in Malwarebytes Cloud Platform

Document created by bgoddard Employee on Sep 18, 2019Last modified by bgoddard Employee on Oct 7, 2019
Version 15Show Document
  • View in full screen mode

Malwarebytes Cloud Platform can run automated scans on your endpoints based on a schedule that you define. Scheduled scans quarantines threats and Potentially Unwanted Programs without manual action. You may also schedule an Asset Inventory Scan to provide endpoint application information instead of scanning for threats.

 

Scheduled scans are managed at the group level. Each scheduled scan can run on Windows or Mac endpoints, or a combination of the two. You may also schedule an Asset Inventory Scan, which is different from a traditional malware scan; see Types of scans for more information.

 

Create a scheduled scan

  1. Go to Settings > Schedules.

  2. Click New to create a new scan schedule.

  3. Give the schedule a name.

  4. Under Scan Type, choose Scan

  5. Enable the platforms you want the scan to run on: Windows, Mac, or both. 

  6. For Windows scans, select the Scan Method: Threat Scan, Hyper Scan, or Custom Scan
    For more information on scan types, see Types of Malwarebytes cloud platform scans

  7. Select Quarantine found threats automatically to have Malwarebytes place any discovered threats into quarantine without prompting the end user.

  8. For Mac scans, choose how to handle Potentially Unwanted Programs (PUPs): Treat detections as malware, or Ignore detections

  9. Under Scan Targets, choose one or more groups to apply the scheduled scan to.


  10. Select how often you want the scheduled scan to run: Hourly, Daily, or Weekly.

  11. By default, your first scheduled scan will run on the following day at 12:01 AM. You may adjust the start date and time by changing the Start Date and Start Time information.


  12. At the top of the Schedule screen, click SAVE.

 

Create a scheduled Asset Inventory Scan

An Asset Inventory Scan retrieves information on all endpoints in a group and updates the Endpoint Properties screens for that group. The information gathered is determined by the Asset Management settings in each group's policy.

 

Note: Before you set a scheduled Asset Inventory Scan, double check each group's Asset Management policy settings. See Adjust policy Asset Management settings in the article Types of Malwarebytes Cloud Platform scans.

 

  1. Go to Settings > Schedules.

  2. Click New to create a new scan schedule.

  3. Name the schedule.

  4. Under Scan Type, choose Asset Inventory Scan.

  5. Under Scan Targets, choose one or more groups to apply the scheduled scan to. Each endpoint in the selected groups will be scanned based on the group policy Asset Management settings.


  6. Select how often you want the scheduled scan to run: Hourly, Daily, or Weekly. 

  7. By default, your first scheduled scan will run on the following day at 12:01 AM. You may adjust the start date and time by changing the Start Date and Start Time information.


  8. At the top of the Schedule screen, click SAVE.

The Asset Inventory Scan updates Endpoint Properties for the group endpoints. To view Endpoint Properties, go to Endpoints > Manage Endpoints > click an endpoint name. Click through the available tabs on the Endpoint Properties screen to view more information on the endpoint.

 

For more information on Asset Inventory Scans, see Types of Malwarebytes Cloud Platform scans .

Attachments

    Outcomes