"Threat Scan" - does it include rootkit scan?

[Limon]

Good afternoon.  When we are setting up our policy it appears Full Scan has been replaced by Threat Scan in the cloud console.  Does Threat Scan include all the options available in the Optional Scan check boxes including the root kit scan?  I don't see mention of this in the admin guide and didn't find anything when searching the forum.

Thank you!

Henry

[djacobson]

Hi @Limon. No, the on-demand and scheduled threat scan does not look for rootkits natively unless you engage that option within the policy. Threat scan is equal to the old quick scan. Full scans can be setup via Custom scan option and engaging the "scan all local drives" piece in the scheduler. Despite there being a scan for rootkits (when threat scans run) in your policy, I would advise you to not do that as it can add a lot of additional time to each scan you send and it is not necessary to scan for rootkits all the time, only when you suspect or see rootkit behavior. I would suggest you utilize the custom scan option set in the scheduler to setup specific, rootkit only, scans instead of tagging on rootkit scanning to other scheduled and on-demand scans.