Sysmon Comparison

Reference: Endpoint Agent Commands

Ingesting Defender Event Logs

macOS Agent Installation via Jamf Now

VDI & Virtual Machine Templates

Response Actions

Ingesting MacOS Unified Logs

Ingesting Windows Event Logs

Sleeper Deployment

Reference: Error Codes

Reference: EDR Events

Sensor Connectivity

Ingesting Linux Audit Logs

Ingesting Sysmon Event Logs

Updating Sensors to the Newest Version

Test a New Sensor Version

Payloads

Endpoint Agent Versioning and Upgrades

Endpoint Agent Uninstallation

ChromeOS with Google Chrome Enterprise