Use the Task Tracking tab on the Managed Detection and Response screen to track and view the statuses of approved or rejected investigation tasks and commands.
Tip
Tip
To view the status of Managed Detection and Response task commands, use the Command Tracking screen.
For more information, see Tracking Managed Detection and Response Task Commands.
Important
Important
Apex Central only retains investigation task information for 90 days after submission by the Threat Investigation Center.

Procedure

  1. Go to Response → Managed Detection and Response.
    The Managed Detection and Response screen appears.
  2. Click the Task Tracking tab.
    A table appears and displays a list of investigation tasks with the following information:
    Column
    Description
    Task Description
    The task name manually specified by the Threat Investigation Center administrator
    Command
    The task command to deploy to selected targets
    For more information, see Threat Investigation Center Task Commands.
    Targets
    The number of targets for the task
    Task Status
    The deployment status of the investigation task
    For more information, see Threat Investigation Center Task Statuses.
    Last Updated
    The local time on the Apex Central server of the latest status update
  3. Click the right arrow icon (mdr-pendingtask-expa.jpg) next to a task description to view task command information.
    A table appears and displays the following details:
    Column
    Description
    Command Status
    The deployment status of the task command
    For more information, see Threat Investigation Center Command Statuses.
    Endpoint
    The name of the target endpoint
    IP Address
    The IP address of the target endpoint
    User
    The name of the user that last logged on to the target endpoint
    Approved / Rejected
    The local time on the Apex Central server for when the task was approved or rejected by the administrator
    Approved / Rejected By
    The user account name of the administrator that approved or rejected the task
    Last Updated
    The local time on the Apex Central server of the latest status update
Related information