Search URL or IP

[vanroy 0]

Hello,

It is possible to see the URL or IP from site not listed as malicious and the endpoint downloaded malware from this site.
ESET Inspect only see the executions.

With other XDR this is possible.

 thank you.

[j91321 7]

With ESET Inspect Cloud you mainly see Raw Events that are attached to triggered detection. Su unless this HttpRequest or TcpIpProtocolIdentified event triggered some detection rule you won't see it in EIC. You would need On-Prem version which stores all raw events.

[vanroy 0]

ok thanks,

This is limitation of EIC should release and improve the Relationship graph