G DATA MXDR

Endpoint list

In the row for each endpoint, you can see at a glance the name of the endpoint, its status, the operating system, when the G DATA Agent was last seen by the G DATA Cloud Backend, the version of the installed Agent, the tag you assigned (if present), and the Organization Unit in which the endpoint is located.

Clicking a row opens the details window for the selected endpoint.

Move

Here, authorized users can move the endpoint to another Organization Unit.

Tag

It is possible to assign one or more tags to each endpoint. You can use a tag suggested by us or formulate a tag freely. This can be, for example, the name of the employee who owns this device. Or you may want to indicate that this endpoint has a specific function (for example, POS systems, control unit, etc.) or a particular criticality level.
The suggested tags are ClientOS, ServerOS, and Kritisch.

To edit the tags, click Add description…​ (→ 1).

Click the X to delete a tag (→ 2). It is important to confirm your input with the blue save icon (→ 3) so that it is saved.

Agent configuration

This section is for your information. Changes here can only be made by our G DATA Security Operations Team. The exception is the toggle "Temporarily log only (60 minutes)", which is explained below.

By default, these items are enabled. Both stopping malware immediately and the analysis by our G DATA Security Analysten are prerequisites for a timely and effective response to prevent damage from a security incident.

When the product was introduced, before onboarding with our G DATA Security Operations Team, a detailed list was created specifying which of your systems we exclude from the Agent response or from analysis by our G DATA Security Analysten. This was done based on a detailed risk analysis.

If you have further change requests for individual endpoints during ongoing operations, please contact our G DATA Security Operations Team.

Using the "Temporarily log only (60 minutes)" toggle, you can prevent work from being blocked due to detections on the affected endpoint for 60 minutes.
On the endpoint, the tray icon is grayed out during this time, and the pause is shown on mouse-over. For security purposes, a window opens that explains the functionality and points out the risks.

Exclusions

This section is for your information. Changes here can only be made by our G DATA Security Operations Team.

If technical issues occur, and you suspect a connection with our Agent, it is not necessary to define exclusions. Contact us in this case, and we will review and resolve the issues as quickly as possible.

Uninstall Agent

Here you can uninstall the Agent or remove the endpoint from the list. Endpoints on which an Agent is still installed and running cannot be removed from the list.

Export

Using the button , the list of endpoints can be downloaded as a comma-separated file (.csv format).

Column display

Here you can configure which table columns are shown or hidden. Click the highlighted icon and adjust the display as required in the window that opens.

Search

Here you can enter any search terms to search for individual entries.

Filter options

The list can be filtered by various options. These are grouped by "Status" and "Tag", and you can combine as many options as needed.