This is a generic (level 3) event to collect real-time AV scanner events from Clam Anti-virus.
 What you should do
No action recommended. This is a generic catch all "bucket" for Clam AV real-time events, that include initialization.
 False Positives
There are no false positives with this rule.
 Tuning Guidance
This rule can safely be set to logging type "no" to prevent it from being reported in the event viewer. Do not disable this rule, as it is a requirement for other IDS related rules.
 Additional Information
If you are unsure about how to respond to this alert, please contact Atomicorp support. We're here to help you!
 Similar Rules
 Knowledge Base Articles
 Outside References