Server Guard checks if the web directory contains any webshell file. In detection of any webshell file, a warning is issued.
Server Guard performs webshell detection through the following ways:
Dynamic check: a change to the web directory file triggers the check on the changed content.
Regular check: Server Guard checks the web directory once during the day specifically in the early morning.
The following operations are supported to handle the unwanted files found:
Isolation: you can isolate the Trojan files discovered in the console. Batch operations are supported.
Recovery: in case of mis-isolation, you can perform a rollback in one click.
Note: Automatic deletion of webshell files is currently not supported.