topic Re: Sandblast forensic report generation through smart endpoint console . in Endpoint

Sandblast forensic report generation through smart endpoint console .

Ankit — Fri, 12 Jul 2019 11:01:01 GMT

Hello Team,

We are facing issue while generating forensic report through smart endpoint console.

we are able to view detail forensic report through sandblast agent while click to incident

id.below are forensic report we capture from agent . same we need to generate

though smart console.

Re: Sandblast forensic report generation through smart endpoint console .

Lior_Arzi — Fri, 12 Jul 2019 14:24:42 GMT

Can you please explain better the issue? it was not clear.

Re: Sandblast forensic report generation through smart endpoint console .

Ankit — Sat, 13 Jul 2019 09:50:34 GMT

Hello Lior_Arzi,

I have some questions regarding sandbalst EPM

Questions:-

1), As you have seen in my previous post I had attached forensic report. That report, we have obtained from agent machine. So is it possible to view that detailed report from my EPM server, Because it's not possible to view the forensic report, going to the each and every agent machines.

2) Can we have any option in EPM server to check whether agent machine online or offline ?

3)How can we send auto email notification to user or admin that your system got infected and sandblast prevented them ?

Please help me ..

Re: Sandblast forensic report generation through smart endpoint console .

mosesmac — Sat, 05 Dec 2020 10:45:57 GMT

Hi All,

Was this query ever answered? I would love to know the same.

Re: Sandblast forensic report generation through smart endpoint console .

Guy_Avnet — Sun, 06 Dec 2020 07:39:33 GMT

Hi,

2) Can we have any option in EPM server to check whether agent machine online or offline ?

[Guy] overview page provides information about online machines. the machine will be removed after offline for a duration longer than 30 days.

3)How can we send auto email notification to user or admin that your system got infected and sandblast prevented them ?

[Guy] configuration is available via smartevent, by creating a new event, correlating logs to it. I agree configuration should be simpler and we are working on that, hopefully available early 2021.

Re: Sandblast forensic report generation through smart endpoint console .

mosesmac — Tue, 08 Dec 2020 10:00:35 GMT

Thank you very much. I look forward to the same. Appreciated.