Articles de support WithSecure Elements Endpoint Detection and Response

Comment tester les capteurs de Elements Endpoint Detection and Response ?
What data does the WithSecure Elements Endpoint Detection and Response sensor collect?
WithSecure and the MITRE “Turla” results
Changes in the new Broad Context Detection (BCD) details view
Changes in EDR Automated responses
Improvements in Broad Context Detection handling
Comment activer WithSecure Elements Endpoint Detection and Response lors de l'utilisation de Policy Manager ?
Pourquoi les boutons d’action rapide (tels que « Isoler le périphérique affecté » et « Analyser le périphérique ») sous la vue détaillée de la détection de contexte large sont-ils grisés dans le centre de sécurité Elements ?
Le capteur Endpoint Detection and Response (EDR) dans Business Suite Client Security ou Server Security ne parvient pas à se connecter au back-end
Elements Endpoint Detection and Response (EDR) lancement de l'exécution et inadéquation de la date/heure de détection

What data does the WithSecure Elements Endpoint Detection and Response sensor collect?

What data does the WithSecure Elements Endpoint Detection and Response sensor collect?

The WithSecure Elements Endpoint Detection and Response sensor collects event-based data such as:

file accesses
process creations
network connections
registry writes
system log entries relevant to detecting security breaches
extracts of scripts derived from run-time execution

The sensor does not collect sensitive information such as documents, other files or content.

These data are sent to the WithSecure Elements Endpoint Detection and Response Portal using secure connections (HTTPS) and the current estimate of data transmission is approximately 30MB per sensor/day.