Stand-Alone Windows Hosts
Deployment
Integration of Stand-Alone Windows hosts requires the installation of a local agent to send events to the HyperCollector. A HyperCollector supports a number of open source and proprietary agents and sources as options.
The automation-assisted NXLog CE deployment is the recommended default for HyperCollector 2.0 and HyperSec XDR 2.1.
HyperSec Native is the recommended default for HyperCollector 2.1 and HyperSec XDR 2.2.
The recommended default deployment is provided in the following location
Winlogbeat is also supported with deployment and update automation. Note: the Beats option must be deployed and maintained by the source organisation.
This stage will take events from the local host and send them to the HyperCollector using the channel associated with the source type (Native, NXLog or Beats)
Updates
Updates can be performed by cloning the latest version from the repository and then deploying and re-executing the installation.