Computer Telemetry on the Investigation Page

Applies To: WatchGuard Advanced EPDR This topic applies to the WatchGuard Advanced EPDR endpoint security product.

The Investigation page enables you to analyze events in depth for specific computers and dates. You can review detailed event telemetry to inspect the processes run on a computer. You can minimize this section to more easily view events on the Investigation tab.

Your operator role determines what you can see and do in WatchGuard Cloud. Your role must have the Access Advanced Telemetry permission to view or configure this feature. For more information, go to Manage WatchGuard Cloud Operators and Roles.

For more information about computer telemetry, go to:

• Create a Computer Investigation
• About the Advanced SQL Query Tool
• Investigation Graph Window

Related Topics

Configure Verbose Mode