Files - Wirespeed

File Exclusions

You can exclude files that are frequently flagged as malicious but are intended for legitimate use. See Exclusions for more information.

Metadata

Tools have the following metadata available on them that alter how they are handled:

Name	Description
Late stage tool	Associated with tools that are common in the later stages of a breach
Malware	Tools that are commonly used in breaches
Benign	Known safe for use
Ransomware	Encrypts files and demands payment for decryption
Unknown	None of the above categories are true

Unknown file risk means Wirespeed did not assign another label (malware, benign, live-off-the-land, etc.) from the file and threat data it had. That is not a determination that the file is safe or malicious.