Tasks

A task is a resource implemented in Advanced EDR that enables you to associate a process with two variables: repetition interval and execution time.

• Repetition interval: You can configure tasks to be performed only once, or repeatedly through specified time intervals.

• Execution time: You can configure tasks to be run immediately after being set (immediate task), or at a later time (scheduled task).

Introduction to the task system

Accessing the task system

Depending on your need to configure all parameters of a task, these can be set up from different areas of the management console:

• Top menu Tasks.

• Computer tree (accessible from the top menu Computers).

• Lists associated with the different supported modules.

The computer tree and the lists enable you to schedule and launch tasks quickly and easily, without having to go through the entire configuration and publishing process described in section Steps to launch a task. However, they provide less configuration flexibility.

Steps to launch a task

The primary resource for creating a task is the Tasks area accessible from the menu at the top of the console. This area enables you to create tasks from scratch, configuring every aspect of the process.

The process of launching a task consists of three steps:

• Task creation and configuration: Select the affected computers, the characteristics of the task, the date/time the task will be launched, the task frequency, and the way it will behave in the event of an error. Task settings depend on the type of task. For more information about how to create and configure a task, see Task types

• Task publication: The tasks you create must be entered in the Advanced EDR task scheduler to be run on the scheduled day/time.

• Task execution: The task is run when the configured conditions are met.

Task types

Advanced EDR enables you to launch the following tasks:

• Scan and disinfect files. See On-demand computer scanning and disinfection for more information.

• Install patches and updates for the operating system and other programs installed on user computers. For more information, see Download and install patches.

• Search for IOCs across the computers on the network. See Detection and management of IOCs for more information.

Permissions associated with task management

For more information about the permission system implemented in Advanced EDR, see Understanding permissions.

To create, edit, delete, or view tasks, you must use a user account that has the appropriate permission assigned to its role. Depending on the task, the required permissions are:

• Launch scans and disinfect: To create, delete, and edit Scheduled scans tasks.

• Search for and manage IOCs: To create, delete, and edit Detect IOCs tasks.

• Install, uninstall, and exclude patches: To create, delete, and edit Install patches tasks.

• View detections: To view the results of Scheduled scans tasks.