You can see the systems in your environment that used a particular file. You can also see used files signed by a specific certificate and sort files or certificates that were used on your system.
Determine where files and certificates were used
Systems that used a specific file or files signed by a certificate are listed, including the system name, IP address, and the first date when the file was identified on the System Tree of ePO - SaaS. The Where Was File Used and Where was Certificate Used actions search into the system where the selected file and certificate was used.
Determine what files and certificates were used in your system
The TIE services track the files and certificates seen by an agent. This tracking optimizes targeted events, for example, sending an event for a change of reputation. After a threshold of an event of 512 agents, the events are only broadcasted.