WithSecure Elements Endpoint Detection and Response

@import "/themes/withsecure/design/coveo/CoveoFullSearch.min.css"; @import "/themes/withsecure/design/headerfooter.css"; header .container, .top-header {display:flex; width: 100%;padding: 0;flex-direction: row;justify-content: space-between;} a#searchboxtoggle[data-toggle="collapse"] #displaysearch:before {content: "\f220";font-family: fsg-icon;font-size: 26px;color: #red;font-style:normal} a#searchboxtoggle[data-toggle="expand"] #displaysearch:before {content: "\f130";font-family: fsg-icon;font-size: 26px;color: #fff;font-style:normal} .header-searchbox {position: absolute;margin: 0;z-index: 30;width: 0;overflow: hidden;right: 30px;height: 53px; transition: .6s ease-in-out;} @media screen and (max-width: 370px){ .header-searchbox.expand {width: 300px;} } @media screen and (min-width:371px) and (max-width: 700px){ .header-searchbox.expand {width: 450px;} } @media screen and (min-width:701px) and (max-width: 991px){ .header-searchbox.expand {width: 450px;} } @media screen and (max-width: 991px){ a.Header-logo svg {margin-top:8px} .header-coveosearch { margin:auto;width: 60px;position: absolute;right: 0;height: 64px;} .header-searchbox {width: 0;overflow:hidden} .header-searchcontainer {position:absolute;margin:auto;top: 0;width: 60px;height: 62px;text-align: center;} .header-searchcontainer {padding-top: 6px;} .header-searchbox {position: absolute;margin: 0;z-index: 30;width: 0;overflow: hidden;right: 60px;top:0;height: 63px;} .bottom-header.display {width:100%} .searchPage .Hamburger {right:9px!important;left:unset!important} .searchPage .Hamburger-border {right:0!important;} } @media screen and (min-width: 992px){ header .row:nth-child(1) {position:absolute; top:0;height:52px} .bottom-header {margin-top:60px} .header-top-links {margin-left:auto} .header-searchcontainer {float:unset; margin:unset} .header-coveosearch {margin-top:8px;margin-right:30px;width: 10px;} .header-searchbox {top: -9px;} .header-searchbox.expand {width: 500px; min-height:200px} .searchboxtoggle {margin-top:0} .searchboxtoggle:hover {cursor:pointer} .searchboxtoggle:hover #displaysearch:before, .header-searchcontainer.expand .searchboxtoggle:hover #displaysearch:before {color: #c6ceff} .helpforum-dropdown:hover, .supportarticles-dropdown:hover {cursor: default;} .helpforum-dropdown a:hover {cursor: pointer;} .helpforum-dropdown a, .supportarticles-dropdown p {width: fit-content} .header-top-link.active::after, .header-top-link:hover::after {top:-5px} .helpforum-dropdown.active::after, .supportarticles-dropdown.active::after, .dropdowns > li:hover::after {top:7px} } @media screen and (min-width: 992px) and (orientation:landscape) { .top-header {width:98%;} } .btn { min-width: 100px; } .btn-inverse { color: #fff; border-color: #fff; background-color: #00000000; border-width: 1px; } .btn { display: inline-block; margin-bottom: 0; font-weight: 600; text-align: center; vertical-align: middle; touch-action: manipulation; cursor: pointer; background-image: none; border: 1px #00000000; line-height: .71; border-radius: 4px; -webkit-user-select: none; -moz-user-select: none; -ms-user-select: none; user-select: none; font-size: 14px; padding: 14px 15px; min-width: 114px; text-decoration: none; } .btn-lg, .btn { -webkit-font-smoothing: antialiased; -moz-osx-font-smoothing: grayscale; } .btn { text-rendering: optimizeLegibility; -ms-font-feature-settings: "liga" 1,"kern" 1; font-feature-settings: "liga" 1,"kern" 1; font-variant-ligatures: normal; font-kerning: normal; } a { text-decoration: underline; } .cmp_footer { font-family: Archivo-Light; color: #bec3c8; font-size: 14px; font-weight: 300; line-height: 1.6em; letter-spacing: .03em; background-color: #001423; color: #fff; padding: 3em 0 2em 0; text-align: center; } @media (min-width: 992px) .cmp_footer__newsletter { grid-area: newsletter; margin-top: 2.5em; } .cmp_footer { font-family: Archivo; color: #bec3c8; font-size: 14px; font-weight: 300; line-height: 1.6em; letter-spacing: .03em; background-color: #001423; color: #fff; padding: 3em 0 2em 0; text-align: center; } .btn.btn-inverse.btn-outline { border: 1px solid #fff; }

Community

User Guides

Support

You need to Enable Javascript to Follow a Category.

Month's Highlights

Discover the most viewed questions in our community this month

Software Updater has an infinite loop resulting in high CPU usage in the WMI service
The Windows Management Instrumentation service and WMI Provider Host process are using 16% - 30% of my CPU every day for multiple hours. This slows down other applications significantly on my work laptop. I can see in the Event Viewer in the events list named "WMI-Activity" that thousands of errors per second are being…
Error installing F-Secure Linux Security 64 on Debian 11
I get the following error message when installing F-Secure Linux Security 64 on Debian 11 according to the manual: Selecting previously unselected package f-secure-linuxsecurity. (Reading database ... 66812 files and directories currently installed.) Preparing to unpack .../f-secure-linuxsecurity.deb ... Unpacking…
Viewing versions With Secure 16.00
Hello, I installed With Secure Policy Manager 16.01 over a month ago and I started installing With Secure Client Security 16.00 however on the Policy Manager console when the computers are in version 16.00 the version it displays and version 15.30? Is there a way to correct this problem because I cannot have a global…
Advanced Mode in PM 16.01
Hi, I updated the PM from V15.30 to V16.01. Now the Advanced Mode is named "Hosts V13.x and earlier". See Screenshot. Does that mean, these settings are no langer valid for our clients versions 15.11 and above?

Recent Discussions

Elements Endpoint Detection & Response Changelog
EDR feature changes will be published under this announcement thread. Every time there is a change, an entry will be created under this announcement describing new functionalities, improvements or bug fixes. 📝 Click here to see the most recent change log and bookmark the discussion to be notified of any updates.
Have you seen more Broad Context Detections on Mac's recently?
Just wanted to see if anyone else is noticing this, over the past month with Mac systems. We have gotten a lot of Broad Context Detections as of late on our Mac's for what appears to be normal update procedures. (com.apple.MobileSoftwareUpdate). Wondering if anyone is aware of recent changes to Mac Updates that may have…
Elements EPP & EDR For Linux server
Hi, We are thinkin about installing server client for our linux desktops. Does the Elements portal show, if linux desktop/server has crypted drive? For Winodws it does and same for mac.
Change existing EPP-installation inplace to include EDR with new EDR-Voucher key?
Since the installer is the same for EPP and EDR, can an already existing install of EPP be changed via a new Voucher-Code to also include the EDR features?
Looking for assistance in dealing with Games in BOYD devices triggering EDR Broad Context Detection
So I'm trying to figure out how other people are dealing with this situation, we have about 80% seasonal staff who all bring their own device. While they are with us, we provide WithSecure ep,edr, vm as well as office and other online tools. Because these devices are owned by the end user, we get so many alerts after hours…
Is EDR blockin legimate Azure Arc functions?
We have got now few alerts where EDR is warning/blocking GC _Service.exe (Azure Policy Guest Configuration – Client) using powershell. It seems to decrypt certificate data and check if the host cert is valid using ocps.digicert.com. We had one medium alert and the process was completed but then we got 2 high level alerts…
Personalisation des mails d'alerte
Bonjour, Est-il possible de ne recevoir que les mails de criticité haute ? je ne vois rien pour personaliser l'envoi de mails d'alerte. Merci d'avance de votre réponse, Edit from @LiselotteP, in English: Hello, Is it possible to only receive highly critical emails? I don't see anything to personalize the sending of alert…
Hi, I would like to know which IP are necessary in my Firewall to connect to WithSecure SRV ?
Hi, I would like to know which IP and port are necessary in my Firewall to connect to WithSecure SRV ?
Endpoint Detection & Response - Advanced Response
What are the limits of maximum assets to run response jobs? Have people experience on this module with large volume of jobs? Im running quite a few jobs now, but are experiencing "hanging" of jobs. Started out fine, but it has been running without updates 15 hours now.
Improvements in Broad Context Detection handling
Recently we have added new functionality to reduce noise and also increase the speed of processing new Broad Context Detections (BCD). Read all about it here:
Updated MSI deployment via GPO
We use a GPO to deploy WithSecure Elements Agent to all client pc's. Works fine. Now I downloaded a new version of the MSI from the portal, and added it to a new GPO while disabling the old GPO. What happens now is that the installer wants to uninstall the previous version (which is actually the same version as in the new…

Welcome!

It looks like you're new here. Sign in or register to get started.