Use the User/Endpoint Directory screen to perform an advanced search for targets that support the Managed Detection and Response Service.
The User/Endpoint Directory screen appears.
The search criteria in the second drop-down control dynamically changes based on your selection.
A third drop-down control and a fourth drop-down control appear.
Enabled: Searches for endpoints that have the Endpoint Sensor Service enabled
Disabled: Searches for endpoints that have the Endpoint Sensor Service disabled
OR: Allows you to search for multiple values for the specified criteria. All records that match either value display.
AND: Allows you to select a new search criteria. Only records that match the values specified for this criteria and all other selected criteria values display.
Search: Displays the search results in the list but does not save the search criteria.
Save as New Custom Filter: Displays the search results in the list and prompts you to save the search criteria to a custom filter. The custom filter displays under the Endpoints node in the User/Endpoint Directory tree.
Tabular view only supports exporting data as a *.csv file.
Timeline view can export data as a *.csv file or a *.png image.