cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
117
Views
0
Helpful
1
Replies

Trying to run a Full Scan on all my WIndows 10 devices. I get an error

nsingh123
Level 1
Level 1

I get this error:

"There are no Endpoint IOC documents activated."

It seems that I need to create a new policy for full scan. How to do it? 

TIA

1 Reply 1

To do an IOC scan, you do...
IOC = Indicator of Compromise. E.g. file/hash/regkey/whatever that means "they got to this box"
IOC scans are very intensive scans intended for "incident response situations", where you're digging for bad actors in your network.

If you mean you're trying to do an old-school "virus scan" there isn't really a way to do "scan all of my machines right now."
You can do them one at a time, or add a scheduled scan to the policy with a time that's soon...

Keep in mind a full scan will eat up CPU.
There's also a philosophy that you shouldn't have to do a full scan... if its hit the box after install Secure Endpoint should have seen it.
(yes, I know there are issues with that... just letting you know what I know)