Reference: Endpoint Agent Commands

Response Actions

Sysmon Comparison

Reference: Error Codes

Reference: EDR Events

Sensor Connectivity

Ingesting MacOS Unified Logs

Ingesting Linux Audit Logs

Ingesting Windows Event Logs

Ingesting Sysmon Event Logs

Updating Sensors to the Newest Version

Test a New Sensor Version

Ingesting Defender Event Logs

Sleeper Deployment

Payloads

Endpoint Agent Versioning and Upgrades

Endpoint Agent Uninstallation

ChromeOS with Google Chrome Enterprise

Agent Deployment via Microsoft Intune

Docker Agent Installation