Skip to content

Commit aa5f97c

Browse files
committed
Incorporates Nat's review
1 parent 3624d60 commit aa5f97c

File tree

1 file changed

+9
-4
lines changed

1 file changed

+9
-4
lines changed

docs/serverless/edr-manage/identify-third-party-AV-products.asciidoc

Lines changed: 9 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,15 @@
11
[[identify-third-party-av-products]]
2-
= Use Endpoint Insights to find incompatible AV products on your hosts
2+
= Identify antivirus software on your hosts
33

4+
.Technical preview
5+
[IMPORTANT]
6+
====
7+
This feature is in technical preview. It may change in the future, and you should exercise caution when using it in production environments. Elastic will work to fix any issues, but features in technical preview are not subject to the support SLA of GA features.
8+
====
49

5-
Third-party antivirus (AV) software installed on your hosts can interfere with {elastic-defend}. Issues with running third-party AV alongside {elastic-defend} can be mitigated, but first you have to identify which AV is present.
10+
Third-party antivirus (AV) software installed on your hosts can interfere with {elastic-defend}. To mitigate issues with running third-party AV alongside {elastic-defend}, you first have to identify which AV is present.
611

7-
After you've installed {elastic-defend} on one or more hosts, you can use **Endpoint Insights** to check whether your endpoints have third-party AV software installed. Using the same kinds of LLM connectors as Elastic AI Assistant, Endpoint Insights can analyze file event logs from your hosts to determine whether antivirus software is present. From there, you can address any incompatibilities to make sure your endpoints are protected.
12+
After you've installed {elastic-defend} on one or more hosts, you can use **Endpoint Insights** to check whether your endpoints have third-party AV software installed. Using the same kinds of large language model (LLM) connectors as Elastic AI Assistant, Endpoint Insights can analyze file event logs from your hosts to determine whether antivirus software is present. From there, you can address any incompatibilities to make sure your endpoints are protected.
813

914
.Requirements
1015
[sidebar]
@@ -17,7 +22,7 @@ To use this feature, you need:
1722
--
1823

1924
[discrete]
20-
== Start using Endpoint Insights
25+
== Scan your hosts for AV software
2126

2227
* Find **Endpoints** in the navigation menu or use the global search field.
2328
* Click on an endpoint to open its details flyout, then under *Endpoint Insights*, click **Endpoint Insights scan**.

0 commit comments

Comments
 (0)