48
Downloads
0
Endorsements
12
Components
Sorry you need to login to submit improvement.

This product pack contains instructions that provides the historical information about network usage, energy usage, resource usage, process activity by user, application usage, etc. Windows 10 SRU database is an Extensible Storage Engine database which stores forensic information on historical application activity.

Scenario

An IT administrator is getting frequent tickets from the service desk regarding a sudden surge of resource usage & process activity on a certain group of machines periodically. The service desk is unsure of the way the first level of troubleshooting is supposed to be carried out. This product pack can help the service desk by getting them the historical information about the suspected devices which can help them in narrowing the path of troubleshooting to solve the issue.

Components

Known Issues / Additional Notes

Value Score

Usage Frequency
-
Time Saved
0 Minutes
Criticality
-

Info

Status
Verified
Author
1E Product Pack Team
Category
Performance, Security, Troubleshooting
Tags
Forensics FTK Imager OSQuery Rekall SRU
Added
7 months ago
Last Updated
6 months ago
Downloads
48
Compatibility
Platform - v5.2, v5.1, v5.0

This website is designed for desktop. If using a mobile browser please change to desktop view.