EDRKATA. Integration with EDR (KATA)

Commands for managing the Endpoint Detection and Response component (KATA):

Command syntax

avp.com START EDRKATA

avp.com STOP EDRKATA

avp.com edrkata /set /servers=<server address>:<port> /server-certificate=<path to the TLS certificate> [/timeout=<Central Node server connection timeout (s)>] [/sync-period=<Central Node server synchronization period (min)>]

avp.com edrkata /show

Operation

 

stop

Disable the EDR component (KATA).

start

Enable the EDR component (KATA).

set

Configure the EDR component (KATA). You can modify the following settings:

  • Add Central Node servers (servers=<server address>:<port>).
  • Add a TLS certificate(server-certificate=<path to the TLS certificate>).
  • Set the Central Node server connection timeout (/timeout=<Central Node server connection timeout (seconds)>).
  • Set the period for synchronization with the Central Node server (/sync-period=<Central Node server synchronization period (minutes)>).

show

Display the current settings of the component.

Page top