You can review forensic data you have collected from your host endpoints.
Note
If the sum of the unzipped sizes of the audits included in an acquisition (or triage collection) exceeds 3 GB, an error message displays indicating that the acquisition cannot be viewed in the Audit Viewer or in the Triage Viewer.
Exploit Guard data cannot currently be viewed in the Audit Viewer.
Timestamps in the Web UI are presented in UTC time.
Prerequisites
Analyst, Senior Analyst, Investigator, or Admin access