This widget allows you to start a basic Historical Investigation across your network using a single criterion type.
Important:
This feature requires that you have valid Endpoint Sensor policies deployed to endpoints.
Select the type of criteria, specify the value, and click Assess Impact. The Historical Investigation screen appears with the assessment results.
Note:
To perform a more complicated assessment, use the Historical Investigation or Live Investigation screens.