Product Troubleshooting WithSecure Elements Endpoint Detection and Response

How to test the Elements Endpoint Detection and Response sensors?
What data does the WithSecure Elements Endpoint Detection and Response sensor collect?
WithSecure and the MITRE “Turla” results
Changes in the new Broad Context Detection (BCD) details view
Changes in EDR Automated responses
Improvements in Broad Context Detection handling
How to activate WithSecure Elements Endpoint Detection and Response when using Policy Manager?
Why are the quick action buttons (such as “Isolate Affected Device” and “Scan Device”) under the Broad Context Detection details view greyed out in the Elements Security Center?
Endpoint Detection and Response (EDR) sensor in Business Suite Client Security or Server Security is unable to connect to the backend
Elements Endpoint Detection and Response (EDR) execution start and detection date / time mismatch

The RDS Linux sensor does not install. What should I do?

The RDS Linux sensor does not install. What should I do?

Run the following commands to remove a failed installation, and then rerun the installation:

sudo mv /var/lib/dpkg/info/atp-sensor.* /tmp/ sudo dpkg --remove --force-remove-reinstreq atp-sensor sudo apt-get remove atp-sensor

Check the system logs for general errors (messages starting with thesensorprefix).
- Debian and Ubuntu (/var/log/syslog):
```
sudo cat /var/log/syslog |grep sensor
```
- CentOS, Red Hat and AMI Linux (/var/log/messages):
```
sudo cat /var/log/messages |grep sensor
```
Check your configuration
1. Check the firewall rules for outbound connections.
2. Check that the proxy settings are correct.
3. Check that the sensor.conf file exists.