Cloud Storage Scanning supports scanning for malicious files in your enterprise level Box account. Configure a continuous or scheduled scan to check for any malicious files currently in your users' Box folders.
The following scan frequencies are available:
- Scan now: An on-demand scan of your cloud storage folders.
- Daily: A scheduled scan that runs daily at the specified time.
- Weekly: A scheduled scan that runs on certain days of the week at the specified time.
- Monthly: A scheduled scan that runs on a certain day of the month at the specified time.
- Continuous scan: A continuous scan that checks for new and updated files. Configure an on-demand or scheduled scan first to check for any current malicious files.
For more information, see Should I run a scheduled scan, continuous scan, or a combination of both.
Nebula Requirements
- The Nebula Super Admin or Administrator must be a Box Enterprise Admin or Co-Admin.
Box Configuration
A Cloud Storage Scanning application must be created in Box:
- Log in to https://app.box.com/ as a Box Enterprise Admin or Co-Admin.
- Create a new Custom App with Client Credentials Authentication. For more information, see App creation steps.
- Set the App Access Level to App + Enterprise Access. For more information, see Application Access.
- Enable Multi-Factor Authentication in order to fetch the client secret. For more information, see Multi-Factor Authentication Set Up for Your Account.
- Set the permissions for the application. For more information, see Application Scopes.
- Under Application Scopes, enable the following:
- Write all files and folders stored in Box
- Manage users
- Manage enterprise properties
- Under Advanced Features, enable Make API calls using the as-user header.
- Under Application Scopes, enable the following:
- Under the Authorization tab, review and submit the application for authorization. For more information, see Authorizing Custom Applications in Sandbox and Production Environments.
- Under the General tab, record the Enterprise ID.
- Under the Configuration tab, record the Client ID and Client Secret.
Nebula Configuration
Once the Enterprise ID, Client ID, and Client Secret have been recorded, configure a cloud storage scan for Box:
- On the left navigation menu, click Settings.
- Click Cloud Storage Scans.
- In the top-right, click Add a Scan.
- Enter a name for the scan configuration.
- Select Box and enter the Enterprise Id, Client Id, and Client Secret.
- Click Connect to Provider.
- To have Malwarebytes only check for new and updated files, select Continuous Scan.
- In the Object selections tab, select which users or folders to scan.
- In the Scan frequency tab, select a scan frequency.
Note: Scheduled scans run in Coordinated Universal Time (UTC). - In the top right, click Save.
Return to Malwarebytes Cloud Storage Scanning guide.