Data acquisition requests (sometimes referred to as Live Response requests) allow you to acquire any data you need from a single running endpoint. Using the Data Acquisition Scripts page, you can create, edit, copy, and delete the data acquisitions scripts used for data acquisition requests.
Several scripts are provided by Trellix. You cannot delete these scripts, although you can edit or copy some of them and use them as a basis for your own script. If you have edited them, you can also reset them to their factory-distributed form. For more information about the supplied scripts, see Supplied data acquisition scripts.
Note
Acquisition types that can be included in data acquisition scripts request much of the same data collected by MIR audits. In addition, you can import your own MIR scripts.
Admin, Analyst, Senior Analyst, or Investigator access
An active Endpoint Security (HX) Power license installed. See "License Management" in the
Endpoint Security (HX) System Administration Guide
.
If your license expires after you have created your own scripts or have edited supplied scripts, you will be able to see these scripts on the Data Acquisition Scripts page, but you will not be able to edit them or use them to acquire data. You will be able to export them.