| http://www.w3.org/ns/prov#value | - At decision block 412 the method 400 determines if the state associated with the file is ???known malware.??? Similar to the instance where the file is identified as being ???known good,??? the determination of whether a file is ???known malware??? is made by analyzing data contained in a database, such as bit information contained in the scan cache 318.
|
