> ## Documentation Index
> Fetch the complete documentation index at: https://hilt.ai/docs/llms.txt
> Use this file to discover all available pages before exploring further.

# Malware

> Malware findings, malware detection rules, and per-endpoint malware status.

Malware is the finding source for malware-oriented behavior (Gatekeeper bypass, tampering, agent attacks).

Three tabs: **Queue**, **Rules**, and **Fleet**. Rules requires the **manage alerts** permission.

***

## Tab: Queue

Malware-category findings with severity, responsible application, and evidence.

***

## Tab: Rules

Detection rules in the **malware** category, including built-in endpoint rules.

***

## Tab: Fleet

Every endpoint's malware status at a glance (macOS and Linux) — green when clean, red when a machine has findings.

On-device rule families that feed this surface:

* [Tamper](https://hilt.ai/docs/macos-collector/detections/tamper.md)
* [Persistence](https://hilt.ai/docs/macos-collector/detections/persistence.md)

***

## Related

* Isolate a host → [Collectors](https://hilt.ai/docs/dashboard/collectors.md)
* Event search → [Logs](https://hilt.ai/docs/dashboard/logs.md)


This documentation is built and hosted on [Mintlify](https://mintlify.com), a developer documentation platform.