Forum Discussion
Automated Investigation on endpoint
Long story short, we got an alert about a file being malicious. I searched our environment using both the filename and SHA1 hash and located the file on one endpoint. I initiated an investigation and...
When the investigation shows failed, it means "At least one investigation analyzer ran into a problem where it couldn't complete properly."
You just need to resubmit the investigation and if it continues to fail then I would recommend opening a support case.
You just need to resubmit the investigation and if it continues to fail then I would recommend opening a support case.