Viewing information about a host

To view information about a host:

1. Select the Endpoint Sensors section in the window of the program web interface.
2. Select the host for which you want to view information.

This opens a window containing information about the host.

The window contains the following information:

• The Alerts link opens the Alerts section with the search condition containing information about your selected host.
• Clicking the Events, affected by prevention rules link opens the Threat Hunting section with the search condition containing information about your selected host.
• State—Status of the host with the Endpoint Sensors component.

  A host can have one of the following states:

  • Online
  • Offline
• Host—Host name with the Endpoint Sensors component.

  You can click the link with the host name to select one of the following actions:

  • Kill process.
  • Delete file.
  • Get file.
  • Quarantine file.
  • Run program.
  • New prevention rule.
  • Isolate from network.
  • Find events.
  • Find alerts.
  • Copy value to clipboard.
• IP—IP address of the computer where the Endpoint Sensors component is installed.
• OS—Version of the operating system that is installed on the computer with the Endpoint Sensors component.
• Protection—Host status with the Endpoint Sensors component.
• Server—Name of the SCN or PCN server. Only displayed in distributed solution and multitenancy mode.

  Operation mode in which the program can be used to protect the infrastructure of several organizations simultaneously.

  Two-level hierarchy of servers with Central Node components installed. This hierarchy allocates a master control server (Primary Central Node (PCN)) and slave servers (Secondary Central Nodes (SCN)).

• Server name—Name of the Central Node server.
• Last connection—time of the last connection to the Central Node, SCN, or PCN server.
• Version—Type and version of the Endpoint Sensors component installed.
• Status—Status of the Endpoint Sensors component.
• Preventions. Clicking the link opens a table of prevention rules created from file hashes on this host, containing the following information:
  • Type
  • Name.
  • State.
  • Hash.
• Tasks. Clicking the link opens the table of tasks created for this host containing the following information:
  • Time created.
  • Type.
  • Name.
  • Details.
  • State.

See also Managing the Endpoint Sensors component Viewing the Endpoint Sensors table on a standalone Central Node server Viewing the Endpoint Sensors table on a standalone Central Node server with KSC integration Viewing the Endpoint Sensors table in distributed solution and multitenancy mode Filtering and searching Endpoint Sensors by host name Filtering and searching Endpoint Sensors that have been isolated from the network Filtering and searching Endpoint Sensors by PCN and SCN server names Filtering and searching Endpoint Sensors by computer IP address Filtering and searching Endpoint Sensors by operating system version on the computer Filtering and searching Endpoint Sensors based on the Endpoint Sensor component version Filtering and searching Endpoint Sensors based on their activity Filtering and searching Endpoint Sensors by operating errors of the component Quickly creating a filter for computers with the Endpoint Sensors component Clearing the Endpoint Sensors filter Configuring Endpoint Sensors activity indicators Supported interpreters and processes

Page top