To investigate historical records, click Investigation and select New Investigation under the Historical records category.
Endpoint Sensor uses the following methods to investigate historical records.