How to investigate risk factors

​

Procedure

1. Open the Endpoints page or select an endpoint directly from a Dashboard widget.
2. Click the endpoint you want to investigate.
3. The Endpoint details page opens.
4. Navigate to the Risk Factors grid.
5. Locate the risk factor you want to analyze:
   • Use filtering or sorting to quickly find a specific risk factor.
   • By default, only active risk factors are displayed.
6. Expand the risk factor to view additional details.
7. Review the available technical details to determine the cause of the risk. Depending on the risk factor, details may include information such as:
   • Process names
   • User names
   • Browser extension or add-on names
   • Browser profiles
   • Security event information
   • Configuration details
   • Device or application identifiers
   • and more.
   Some risk factors provide extensive diagnostic information, while others may contain minimal details when the cause is self-explanatory.
8. Review the Remediation section associated with the risk factor.
9. Follow the recommended remediation steps to resolve the issue.
10. After the endpoint reports updated probe results, the risk factor status and associated health scores are automatically updated.

​

Key Considerations

• Technical details help identify the exact source of the risk and are often the fastest way to determine the required remediation action.
• Not all risk factors provide the same level of detail. The amount of information available depends on the type of risk and the data collected by the corresponding probe.
• Risk factors with the highest Risk Score should generally be investigated and remediated first, as they have the greatest impact on endpoint, policy, and system health.
• If additional information is required, open the Risk factor details page to review the full risk description, control mappings, and remediation guidance.

​

Related