This guide provides an overview of installing the McAfee® Investigator extension and configuring it on the McAfee® ePolicy Orchestrator® (McAfee® ePO™) server.

It also describes installing the Endpoint Snapshot tool on the McAfee ePO server and deploying it to the client systems through client task to take snapshots of the required client systems. You can use this data to create cases that can be prioritized and investigated for threats on the McAfee Investigator product.