Analyzing the Results

Perform the following steps to analyze the investigation results.

  1. Click Investigation, and select the correct result screen for your investigation source.
  2. On the Results screen, monitor the progress of the investigation. Wait for the investigation to show a processing status. Click on the investigation name to view more information. For details, see Investigation Results.
  3. On the Information screen, view the investigation activity. Endpoint Sensor investigates each endpoint. Once finished with the investigation for an endpoint, Endpoint Sensor updates the screen in real-time to add the result for that endpoint. It then proceeds to investigate the next endpoint. For details, see Information.
  4. Review the results using the tools available in Endpoint Sensor :