7.8. Send file for external analysis to GCenter

7.8.1. Introduction

The GCenter can send files (defined as suspicious or infected) to a remote server (Intelligence site or GBox).
Sending can be done automatically via the configuration or manually via a menu command.
The remote server scans the file and then provides a scan report.
The analysis report is visible on the GCenter to be read by an analyst.

7.8.2. Prerequisites

User : member of Operator group

7.8.3. Preliminary operations

Login to GCenter via a browser (see Connection to the GCenter web interface via a web browser)

7.8.4. Procedure to acces to the `Alerts` screen

Click on the `Alerts` button on the navigation bar, the following screen is displayed.

../_images/ALERTS-02.PNG

7.8.5. Procedure to send the file to the remote server

Select the alert to be analyzed and click on the menu of possible actions in column (7).
Click `Generate Remote Analysis`.

If no remote server is connected then a message appears `Server error`.

If the remote server is running then there is a waiting message for report generation: `Generating report, please wait...`.

Deleting the message indicates the report is available.

7.8.6. Procedure to download the report

Click on the `Download Analysis Report` command.

The report is downloaded and displayed in the browser.
To analyze the contents of the file, see Analysis Report Analysis Procedure.