Data type to be send to MVISION EDR cloud services

[billyT2114]

Hi,

Posting here to check if anyone know about what data will be send to MVISION EDR cloud service for the threat analyst/investigation. In terms of data type or any safeguard procedure. Reason being we have data privacy concern and would like to understand more on this.

PS: we are using on-prem McAfee ePO and thinking of using MVISION EDR with McAfee ePO.

Thanks.

[Sivakumar1 · Accepted solution]

Hello @billyT2114 . Thank you for reaching out to McAfee Enterprise Community. 

MVISION EDR collects real-time data from devices running MVISION EDR clients. MVISION EDR collectors are components that run on managed devices, executed by search expressions.
Collectors specify what real-time data to collect from monitored devices, and how to report it back to MVISION EDR. MVISION EDR provides built-in collectors by default. There are two types of collectors ,

1. Built-in Collector

2. Custom Collectors.

Please find the details in the Collecting device data and reacting to incidents section in the product guide below,

https://docs.trellix.com/bundle/mvision-endpoint-detection-and-response-product-guide/page/GUID-D9A4...