Enabling Threat Hunting

  1. Go to Policy > Policy Capabilities.
  2. Click the Analysis & Remediation tab.
  3. From the Enable Threat Hunting list, select On.
  4. Click Save & Install.
  5. After the policy is pushed to the agents, wait a few minutes until data is sent by the agents.

    Then you can go to the Threat Hunting view to start searching through events.