Where Is Advanced Detection and Remediation extension?

[csavage]

The release notes for ENS 10.7 refer to New feature > Installation and upgrade > Advanced Detection and Remediation extension. "Advanced Detection and Remediation extension — View Story Graph and remediation data" https://docs.mcafee.com/bundle/endpoint-security-10.7.x-release-notes/page/GUID-5184AA07-C0CC-4F24-A... I have been unable to find Advanced Detection and Remediation, or an extension by that name, anywhere. Where is this thing? - Charlie

[mbuehler · Accepted solution]

Hi @csavage ,

The extension is referred to as the "Threat Detection and Reporting" extension, and it can be found under the ENS ATP 10.7 category on the downloads site and in the 10.7 ATP bundle in ePO software manager/catalog.

Thank you,

[csavage]

Thank you; that helps.  I have found that the extension "Threat Detection Reporting" Version: 1.0.0.238 is installed in our instance of on-premises ePO.  But I still cannot find the feature exposed in ePO.  The description in ENS 10.7 release notes is., "View Story Graph and remediation data reported by the Advanced Detection and Remediation extension". 

A search in ePO for "threat" finds the Threat Event Log and Adaptive Threat Protection Events. neither of which looks like what is described.  

So I am still trying to find out where is this thing.  I am closer, though.

- Charlie

[jesusaraujo]

Is ENS ATP licensing required? I don't recall anyone  @mpower 2019 mentioning that on any slides / tech talks.

[Thussain · Accepted solution]

Thank you for posting your query here

ATP requires a license, you could contact your sales Rep and check if you are licensed for ATP. 

Same has been discussed in the below post, please refer to it 

https://community.mcafee.com/t5/Endpoint-Security-ENS/Question-about-if-ATP-is-free-to-use-with-ENS-...

[AdithyanT]

Hi @csavage,

Thank you for your post. Your query, although answered, I am looking up internally to see if this is a mistake in the document for the name of extension to be displayed as Advanced Detection and Remediation extension as the correct one available to check in would be Threat Detection Reporting. I shall keep this thread with confirmation once I receive it.

Please bear with me while I get back to you on this.

[AdithyanT]

Hi @jesusaraujo,

To answer you question, Yes, ATP licensing is required to use this feature. Why? This story graph feature is possible only if ATP components monitor and detect!

ENS without ATP is not capable of accomplishing this and MOST IMPORTANTLY, the story graph is created and managed by Threat Detection and reporting extension that is available only with ATP package.

I sincerely hope this information is helpful.