Install a D2 agent to assist you when performing
an investigation in the War Room.
Before you begin, do the
) You have at least Power
User credentials on the target machine.
) Enable the Service Message Block Protocol
on the target machine.
) Firewall Port 445 (SMB) is
open on the target machine.
Content Pack from the Marketplace.
can install the D2 agent manually or remotely. When port 445 is
open, you can install the D2 agent remotely (from the Cortex XSOAR
server) the first time you communicate with it. If you experience
issues during installation on Windows machines, see Troubleshoot a Remote Installation (Windows).
the system (machine under investigation) to an incident.