Threat Investigation

You can use Capture Client to reduce the effort when analyzing and responding to active threats. You can navigate to the list of threats by clicking Threats.

The Threat lifecycle in the Capture Client Management Console is designed to give you visibility and control. A threat is generated when the agent detects suspicious or malicious activity on the endpoint. The Agent can detect only, or also mitigate threats automatically, based on the Threat Protection Policy settings.

Topics:

• Investigating Threats
• Analyst Verdict
• Downloading a Threat File
• Detected Threats
• Threats Mitigated
• Performing a Rollback
• Resolving Threats
• Blacklisting Threats
• Benign Threats