Cisco AMP Endpoint

[vinit.lakhotiya]

is this Cisco AMP Endpoint agent or agentless, how it work on client can have some more visibility on it

[Ken Stieers]

It AMP is installed on the endpoint.
Depending upon your product level, you could also enable Orbital, which is based on OSQuery, which lets you query the endpoint for almost anything...

[maciek_smolak]

Thank you Ken 

[AnwarNugraha · Accepted solution]

Is AMP effective against ransomware?