Use the
Command Tracking screen to query and view
details of Managed Detection and Response task commands issued by the Apex
Central server.
For information about tracking Threat Investigation Center task commands
that display on the Managed Detection and Response
screen, see Tracking Investigation Tasks.
Procedure
- Go to .The Command Tracking screen appears.
- To filter the command list, specify the following:
-
Issued: Specify when Apex Central sent the task command
-
Command: Select the command typeApex Central Managed Detection and Response task commands include the following:Command NameDescriptionDeploy Threat Investigation Center settings to managed productsCommand for deploying Threat Investigation Center settings to managed productsDeploy Threat Investigation Center tasks to managed productsCommand for deploying Threat Investigation Center tasks to managed productsRenew Threat Investigation Center certificateCommand for renewing the Threat Investigation Center certificate on the Apex Central server
Note
The Threat Investigation Center server automatically deploys a task to renew the Threat Investigation Center certificate on the Apex Central server 30 days prior to the certificate expiration date.Pull Threat Investigation Center tasksCommand for pulling tasks from the Threat Investigation Center serverNote
This command only displays on the Command Tracking screen if the task command is unsuccessful. -
User: Provide the user account name used to send the command
Tip
Leave this field blank to query commands issued by all users. -
Status: Select one or more command statuses and click Apply.
-
- Click the count in the Successful, Unsuccessful,
In Progress, or All column to view detailed
command information.The Command Details screen appears.For more information, see Command Details.