OpenText EnCase Endpoint Security

Version: 1.1
Updated: Jul 03, 2023

Collect evidence, create events and investigations, and issue containment actions with EnCase Endpoint Security.

Actions

Collect Data (Enrichment) - Collect data from an endpoint as evidence during an investigation.
Collect Memory (Enrichment) - Collect memory from an endpoint as evidence during an investigation.
Collect Timeline (Enrichment) - Collect a timeline of events from an endpoint as evidence during an investigation.
Find Items of Interest (Enrichment) - Search for items of interest to an investigation.
List Investigations (Enrichment) -Gather a list of all investigations.
Create Event (Notification) - Create a new event.
Create Investigation (Notification) - Create a new investigation.
Create Snapshot (Containment) - Create a new snapshot.
Ban Hash (Containment) - Ban a file.
Quarantine (Containment) - Quarantine a host.