Forensic data types

The Endpoint Security (HX) can obtain the following types of forensic data.

In addition, you can search your enterprise for specific rule conditions. See Investigate threats using Enterprise Search.Searching your Enterprise.Investigate threats using Enterprise Search

You can configure how acquisitions are run, stored, and aged by the Endpoint Security (HX). See Configuring acquisition settings.