Environment
- EDR Sensor: All versions
- EDR Server: All versions
Question
If every type of Event Collection in the Sensor Group options is unchecked, should the console list any events from the sensors in that sensor group?
Answer
There is a minimum baseline of event collection that gets reported in the console for main OS processes like svchost.exe in Windows or bash in Linux.