EDR / Antivirus Management

What this covers

Endpoint protection across your fleet in one console: agent health, detections and quarantine status. Spot unprotected or infected endpoints fast and drive remediation before a threat spreads.

Reading the console

• Agent health — which endpoints are reporting, and which have gone quiet. A silent agent is an unprotected endpoint.
• Detections — what has been caught, on which device, and when.
• Quarantine — what is currently isolated and awaiting a decision.

The endpoints that matter most

Unprotected endpoints outrank active detections. A detection means protection worked; a missing agent means nothing is watching at all.

Handling a detection

1. Open the detection to see the device, the file and the action taken.
2. Confirm the item is quarantined or removed.
3. Check whether the same detection appears on other devices — one machine is an incident, several is an outbreak.
4. Raise a ticket for anything requiring client action.

Tip: Review agent health weekly. Detections announce themselves; a stale agent will never tell you it stopped.