MAR - Endpoint data collection

Use McAfee Active Response to collect data from an endpoint for IR purposes (requires ePO as well). Input: * Hostname (Default: ${Endpoint.Hostname})

Pack

McAfee-MAR

Tasks

27

Inputs

• Hostname — Hostname to run on.

Commands used

• epo-find-system
• mar-search-multiple