Follow these instructions to install a shared agent.
Install a shared agent on machines that are
under investigation to unobtrusively perform forensic tasks on those
Before you begin, do the following:
You have at least Power User credentials.
) Enable the Service Message Block Protocol.
) Firewall Port 445 (SMB) is open.
Content Pack is installed from the Marketplace.
can install a shared agent manually or remotely. When port 445 is
open, the agent is installed remotely (from the Cortex XSOAR server)
the first time you communicate. If this port is closed, you need
to install it manually on the endpoint.