Product Troubleshooting WithSecure Elements Endpoint Detection and Response

How to test the Elements Endpoint Detection and Response sensors?
What data does the WithSecure Elements Endpoint Detection and Response sensor collect?
WithSecure and the MITRE “Turla” results
Changes in the new Broad Context Detection (BCD) details view
Changes in EDR Automated responses
Improvements in Broad Context Detection handling
How to activate WithSecure Elements Endpoint Detection and Response when using Policy Manager?
Why are the quick action buttons (such as “Isolate Affected Device” and “Scan Device”) under the Broad Context Detection details view greyed out in the Elements Security Center?
Endpoint Detection and Response (EDR) sensor in Business Suite Client Security or Server Security is unable to connect to the backend
Elements Endpoint Detection and Response (EDR) execution start and detection date / time mismatch

Elements Endpoint Detection and Response (EDR) execution start and detection date / time mismatch

Issue:

There is a date / time mismatch between the Elements Endpoint Detection and Response (EDR) execution start and the detection. How is that possible?

Resolution:

The host needs to be turned ON and have an active internet connection for the host to upload the detection information to the EDR portal. If the host goes to sleep mode or loses internet connection, it is expected behavior for the execution start and the detection time / date to differ.

Article no: 000018604