Getting started with Trace

  1. Install the Trace module and deploy the Trace packages to endpoints. See Installing Trace.
    If you are upgrading your version of Trace. See Upgrade the Trace version.
  2. Connect to an endpoint. See Connecting to live endpoints and taking snapshots.
  3. Review endpoint data and drill down to specific events. See Exploring endpoint processes and events.
  4. Conduct forensic analysis. See Saving evidence for analysis.
  5. Examine other endpoints. See Searching across the enterprise.

Last updated: 10/23/2018 1:34 PM | Feedback