@@ -250,15 +250,15 @@ optional arguments:
250
250
Usage example: `sudo ./MDESupportTool -d`
251
251
252
252
> [!NOTE]
253
- > The log level auto-reset feature only available in 2405 or newer client version.
253
+ > The log level autoreset feature only available in 2405 or newer client version.
254
254
255
255
The files generated when using this mode are summarized in the following table:
256
256
257
257
| File | Remarks |
258
258
| ------------- | ------------- |
259
259
| `mde_diagnostic.zip` | Defender for Endpoint logs and configs |
260
260
| `health.txt` | The health status of Defender for Endpoint [^1] |
261
- | `health_details_features.txt` | The health status of additional Defender for Endpoint features [^1] |
261
+ | `health_details_features.txt` | The health status of other Defender for Endpoint features [^1] |
262
262
| `permissions.txt` | Permission issues with the folders owned/used by Defender for Endpoint [^1] |
263
263
| `crashes` | Crash dumps generated by Defender for Endpoint |
264
264
| `process_information.txt` | Process running in the machine when the tool was run |
@@ -271,11 +271,11 @@ The files generated when using this mode are summarized in the following table:
271
271
| `ebpf_syscalls.zip` | Information about system call tracing |
272
272
| `ebpf_raw_syscalls.zip` | Tracing events related to raw system calls |
273
273
| `ebpf_maps_info.txt` | eBPF maps' id and size info |
274
- | ` syslog.zip` | The files usder /var/log/syslog |
274
+ | ` syslog.zip` | The files under /var/log/syslog |
275
275
| ` messages.zip` | The files under /var/log/messages |
276
276
| ` conflicting_processes_information.txt` | Defender for Endpoint Conflicting Processes |
277
277
| ` exclusions.txt` | List of AV exclusions |
278
- | ` definitions.txt` | AV defintion info |
278
+ | ` definitions.txt` | AV definition info |
279
279
| ` mde_directories.txt` | List of files in the Defender for Endpoint directories |
280
280
| ` disk_usage.txt` | Disk usage details |
281
281
| ` mde_user.txt` | Defender for Endpoint User Info |
@@ -301,7 +301,7 @@ The files generated when using this mode are summarized in the following table:
301
301
| `locale_info.txt` | Show current locale |
302
302
| `tmp_files_owned_by_mdatp.txt` | /tmp files owned by group:mdatp [^1] |
303
303
| `mdatp_config.txt` | All the Defender for Endpoint configurations [^1] |
304
- | `mpenginedb.db`, `mpenginedb.db-wal`, `mpenginedb.db-shm` | AV definations file [^1] |
304
+ | `mpenginedb.db`, `mpenginedb.db-wal`, `mpenginedb.db-shm` | AV definitions file [^1] |
305
305
| `iptables_rules.txt` | Linux iptables rules |
306
306
| `network_info.txt` | Network information |
307
307
| `sysctl_info.txt` | kernel settings info |
@@ -313,7 +313,7 @@ The files generated when using this mode are summarized in the following table:
313
313
| `netext_config.txt` | |
314
314
| `threat_list.txt` | List of threats detected by Defender for Endpoint [^1] |
315
315
| `top_output.txt `| Process running in the machine when the tool was run |
316
- | `top_summary.txt` | Memeory and CPU usage analytics of the process running |
316
+ | `top_summary.txt` | Memory and CPU usage analytics of the process running |
317
317
318
318
[^1]: Only when Defender for Endpoint is installed.
319
319
@@ -339,7 +339,7 @@ The files generated when using this mode:
339
339
| `perf_benchmark.tar.gz` | Defender for Endpoint processes performance data |
340
340
341
341
> [!NOTE]
342
- > The files corresponding to diagnostic mode will also be generated.
342
+ > The files corresponding to diagnostic mode are also generated.
343
343
344
344
The tar files contains files on the format `<pid of a MDE process>.data`.
345
345
The data file can be read using the command:
0 commit comments