CylanceGUARDrequires the following:
- CylancePROTECT Desktopagent,BlackBerry Protectapp, andCylanceOPTICSagent installed on the endpoints.
- CylanceGATEWAYagent installed on the endpoints (forCylanceGUARDAdvanced subscriptions)
- The latestCylanceGUARDconsole using multi-factor authentication (MFA).
Operating system versions
Data storage and collection
CylanceGUARDcollects data that is natively collected by
CylanceOPTICS. Potential forensic data sets may be collected in the case of an incident. Data collection includes information contained in both
CylanceOPTICSalerts as well as data captured through the Package Deploy (Refract) and InstaQuery. Package Deploy has the ability to pull forensic artifacts from the file system at almost any level, while InstaQuery returns filesystem, registry, process, and network information from the customer environment.