How to create an investigation | OpenText EnCase Endpoint Security

Once you’ve identified a malicious event, learn how to find out what may have caused it. Then add the event to an investigation for further analysis. This is part 2 of 5 videos in the Detection and Remediation Essentials series.

0:00 Create an investigation
0:14 View a snapshot of event processes
1:12 Open a Process Tree display
2:12 Add an event to a new investigation

If you find this video useful, please like or comment.

Check out related videos on how to get the most out of EnCase Endpoint Security: https://youtube.com/playlist?list=PLEB6VOrLXy0cK0r3AV7sNZaBm-mv_FCyw

Subscribe to be notified whenever we post new content: http://www.youtube.com/OpenTextHowTo?app=desktop&sub_confirmation=1

This video was created using the default UI of EnCase Endpoint Security 21.3. What you see in this video might not reflect what you see in your version or customized interface.

#OpenText #EnCaseEndpointSecurity #NetworkSecurity