Hi,
I’am using cloud-based edr solution and install agent on my test win10 machine. But i cant catch critcal edr events. For test, i’am open cmd and type some command but never catch that actions. I’m check policys, agent and pc all of them working. Just i see “Set Registry Value,Write File,Network Connection, Network Listen, Delete Registry Key” logs but when i’m install malware for test and detect. Never catch this crtical edr events on dashboard.
Where am I doing wrong? Please help.