Collecting Artifacts

Collect Artifacts from client computers.

To collect Artifact from agents:

1. Log in to the web console.
2. Go to Management > Agent.
3. Send Collect Artifact command to the agent as below:

• From the Process Tree in Detection Status Details, select System and send the Collect Artifact command.

• From Agent, send the Collect Artifact command.

4. Select the required item to collect in <Collect Artifact>.

• Default items: Collects the default items from EAC (Endpoint Artifacts Collector). Also collects the process, system, network, hardware, program, timeline, etc for the default items.
• User-defined items: Collects the required artifact only by writing the YAML syntax. Refer to Collecting User-Defined Artifact for writing the YAML syntax.

5. Click OK. Check the result in Response Status.