Scanning an offline endpoint

NAVIGATION   > Organizations > select an organization > select a location >  > Download Agent

SECURITY   Datto EDR subscription with administrator-level platform access or Datto AV subscription with administrator-level platform access

SECURITY   Service account or administrator-level rights on the target endpoint

If an endpoint cannot connect to the internet due to a network outage or because of security considerations, you can perform manual offline scans of the host and use the Import-ICSurvey function to upload the results to our analysis engine for review.

IMPORTANT  An endpoint must have the agent software installed and be associated with a location before our analysis engine can scan it.

What you'll need

  1. USB storage drive, readable by the offline endpoint, with at least 512 MB free storage

  2. Administrator-level command prompt access to the offline endpoint

  3. Access to a USB-enabled computer capable of reading the flash drive and connecting to the internet

Download the agent executable

  1. Log in to your EDR instance. In the top navigation bar, click Organizations.

  2. Select the organization and the location to which you'll be deploying the agent. For more information, refer to Creating and managing organizations, locations, and devices.

  3. On the Location page, click the Download Agent button.

  4. The Download Agent modal will open.

  5. In the Processor drop-down list, select the appropriate agent for the endpoint's operating system.

  6. To download the agent to your current computer, click the Download button.

  1. Copy the installer to a USB drive. Alternatively, you can email the executable to an end user if you cannot be on site and need them to run the process remotely.

  1. Connect the USB drive to the offline endpoint and open a Command Prompt or Terminal session as an administrator. Then, select a topic to continue.

Running the scan

Recovering and importing the survey results

Learn more

You can also use the Datto EDR API to export surveys. For more information, refer to Using the API to upload offline scans to the EDR cloud.