...
...
...
...
...
| Table of Contents | ||||
|---|---|---|---|---|
|
General
...
Where can I purchase Endpoint Detection and Response (EDR)?
Users can sign up for Endpoint Detection and Response on the EDR screen in the Armor Management Portal (AMP).
I don't see EDR in AMP. Why?
EDR access within AMP is permission based. Users may need to request access from their Armor provider.
How long will it take to get my EDR account provisioned?
...
Armor will provision the account on the customer's behalf. Once the licenses are purchased and the account is created, the customer will be informed via the Armor Ticketing System within AMP.
How is the Administrator for EDR determined during sign-up?
Customers can choose an AMP user from accounts within their organization to be given administrator access to the Carbon Black portal. This user must already have an active AMP account and cannot be created during the purchase process.
...
The initial purchase requirement for EDR is 25 licenses.
In AMP, how will I be able to tell if my endpoint is a desktop or laptop?
...
EDR will not show up as an option in the Toolbox until the purchase process has been completed and licenses have been provisioned.
I'm unable to access the Carbon Black portal. Why?
Access to Carbon Black is provided to one EDR Administrator per account and it is possible that your provider has not granted your account access to Carbon Black's portal. If you feel that you should have access, please contact the EDR administrator for your account.
...
In most instances, this means that the KEXT has not been approved on this machine (macOS)
...
Incidents
...
How will I use EDR?
Detections from EDR will be visible in the Incidents screen of AMP. Incidents will provide a hostname for an asset.
Then what?
The assets can then be found in the Virtual Machines screen of AMP where endpoints will appear with an EDR tag. Users can determine the health of an endpoint from the VM screen.
Where can I view events?
Users can view EDR events in Log Search. You can filter events in a number of ways, specifically by hostname or by event.type. For more information on Log Search, please refer to our documentation.
Why am I getting tickets?
...
How do I get my uninstall code?
Documentation for obtaining your uninstall code is provided here.
Was this helpful?
Table of Contents