Complete all incident response investigations on your host endpoint before upgrading your Endpoint Security (HX) software to version 35.31.22.
Important
Before opening an incident response investigation, make sure you stop all enterprise searches and acquisitions running on the host. See the Endpoint Security Server Deployment Guide for more information.
If you cannot complete your open incident response investigations before upgrading your agent software, perform one of the following data collection options to ensure you have collected all the data necessary for an investigation:
If you have a Power (HX_Advanced) license, use the Web UI to request a Standard Investigative Details data acquisition or a Comprehensive Investigative Details data acquisition against your endpoints before you upgrade. Alternatively, use the API to request a data acquisition or bulk acquisition that runs the stateagentinspector audit on your endpoints.
If you do not have an Endpoint Security (HX) Power license, request a standard triage for your endpoints before you upgrade.