Learn more about File Insight

File Insight lets you view the reputation details that are collected from the Norton Community users for important system files. For each file, you can view information such as general details, origin, resource usage, and activities performed by the file.

The File Insight window appears only for the files with the following extensions: .exe, .msi, .dll, .sys, .drv, .ocx, and .loc.

The File Insight window has the following tabs:

• Details

  Displays the information such as trust level, community usage, and how long ago the file was released.

  You can view details such as the signature and the date on which the file was created. You can determine if a file is a startup file and the date on which the file was last used.

  Norton analyzes specific information about a file such as the digital signature and the hash value to determine the confidence level of a file. Norton labels the trusted files as Norton Trusted. You can use the Check for New Rating option to determine the current confidence level of a file. You can also manually trust a file. For example, the confidence level of a file is unknown or not trusted and you know that the file belongs to a well-known application. In this case, you can manually trust the file by using the Trust Now option. If you suspect the trustworthiness of a trusted file, you can use the Don't Trust option and remove the trust level.

  You can also view the community usage of a file to determine the legitimacy of the file. Norton uses a stringent statistical method to evaluate the trustworthiness of a file and to classify it as a Good file.

• Origin

  Provides the lineage details of a file.

  The lineage details of a file are available if you downloaded or created the file after you installed Norton. You can view the URL of the source from where the file was downloaded, if any. You can also view six levels of parent files for a file. You can also determine the safety level of the file.

• Activity

  Provides the details about the resource usage of a process.

  You can choose to view the following details from the Show drop-down list:

  • Performance: Displays the Performance graph.

    The Performance graph helps you determine the effect of the process on the overall resource utilization of your computer. You can use the Zoom option to obtain a magnified view of the performance graph of the processes running on your computer.

  • Performance Alert: Displays the CPU, memory, and hard disk usage details of the process.

    Norton displays the details only when the process exceeds the defined resource consumption threshold limit.

    You can use the Settings link to view the Administrative Settings section in the Settings window.

  • Network: Displays the network activity details of the process.

    Norton displays the details only when the process performs a network activity. For each network activity, you can view details such as the IP addresses and the protocol that is used.

  • System Change: Displays the system events performed by the selected program.

  • Run Key Change: Displays the Windows registry modification details.

    Norton provides the list of programs whose Windows registry entries have been added or modified.