collect-attack-evidence enable (antivirus profile view)
Function
The collect-attack-evidence enable command enables attack evidence collection of the antivirus (AV) function.
The undo collect-attack-evidence enable command disables attack evidence collection of the AV function.
Usage Guidelines
The attack evidence collection function of AV is disabled by default.
Attack evidence collection does not apply to HTTPS traffic.
Attack evidence collection is for troubleshooting only. Because attack evidence collection compromises system performance, you must enable it only when necessary and disable it immediately after you finish attack evidence collection.
After you enable attack evidence collection, the system collects virus-infected data packets when detecting a virus.