Use the Command Tracking screen to query and view details of Managed Detection and Response task commands issued by the Apex Central server.
For information about tracking Threat Investigation Center task commands that display on the Managed Detection and Response screen, see Tracking Investigation Tasks.
-
Go to Administration > Command Tracking.
The Command Tracking screen appears.
-
To filter the command list, specify the following:
-
Issued: Specify when Apex Central sent the task command
-
Command: Select the command type
Apex Central Managed Detection and Response task commands include the following:
Command Name
Description
Deploy Threat Investigation Center settings to managed products
Command for deploying Threat Investigation Center settings to managed products
Deploy Threat Investigation Center tasks to managed products
Command for deploying Threat Investigation Center tasks to managed products
Renew Threat Investigation Center certificate
Command for renewing the Threat Investigation Center certificate on the Apex Central server
Note:The Threat Investigation Center server automatically deploys a task to renew the Threat Investigation Center certificate on the Apex Central server 30 days prior to the certificate expiration date.
Pull Threat Investigation Center tasks
Command for pulling tasks from the Threat Investigation Center server
Note:This command only displays on the Command Tracking screen if the task command is unsuccessful.
-
User: Provide the user account name used to send the command
Tip:Leave this field blank to query commands issued by all users.
-
Status: Select one or more command statuses and click Apply.
-
-
Click the count in the Successful, Unsuccessful,
In Progress, or All column to view detailed
command information.
The Command Details screen appears.
For more information, see Command Details.