QuestionQ218

VerifiedSensor Deployment

What is the main concern when Windows sensors enter Reduced Functionality Mode (RFM)?

Explanation

Windows sensors operating in Reduced Functionality Mode have reduced telemetry and detection coverage because some kernel elements are temporarily unavailable. As a result, the sensor does not have full visibility into every event occurring on the host.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!