EDR Monitoring Dashboard - Missing option

[Rosie10]

Hello,

I would like to report you this difference: 

In McAfee's documentation, the actions to take in the "Monitoring" table are: "Create an investigation, Exclude from Threats, Dismiss" but currently in our console there are only two.

For the Device Pane also, we do not have the option "Stop and remove", that we think helpful.

Please see the added attachments (i cannot attach additional printscreen for the Device Pane), and let me know if it is normal or if there is a change recently.

Thank you,

Best Regards.

[Daveb3d]

This is because the detection is of a command line, not a process.  You can't remove a command line, so the option isn't there. If a process is running with this detection, use RTS and look up running processes on the system.  From there you can terminate, but generally speaking these are unlikely to still be running.

Dave

[Rosie10]

Hello Daveb3d,
I thank you for your prompt reply.
This is for the same reason that we don't have the option "Exclude from threat" too?
Many thanks

[Rosie10]

Hello,
is it for the same reason we did not see the other option "Exclude from Threat"?
Please let me know in order to close this conversation.

Thank you,
Best Regards