Install a D2 agent to assist you when performing
an investigation in the War Room.
Before you begin, do the
) You have at least Power
User credentials on the target machine.
) Enable the Service Message Block Protocol
on the target machine.
) Firewall Port 445 (SMB) is
open on the target machine.
You can install the
D2 agent manually or remotely. When port 445 is open, you can install
the D2 agent remotely (from the Cortex XSOAR server) the first time
you communicate with it. If you experience issues during installation
on Windows machines, see Troubleshoot a Remote Installation (Windows).
the system (machine under investigation) to an incident.