Technical Tip: FortiEDR threat hunting overview an...

RiverChen · 01-23-2026

Description This article describes an easily overlooked configuration that can cause FortiEDR collectors to remain in the Default Collector Group. Scope FortiEndpoint. Solution In FortiEndpoint environments, the FortiEDR collector is deployed and man...

RiverChen · 12-04-2025

Description This article provides a overview of the Threat Hunting feature in FortiEDR. Scope FortiEDR Manager 7.2+ Solution Data Retention. Threat Hunting (TH) data retention depends on: The amount of data collected. The size of the cloud repository...

RiverChen · 09-22-2025

Description This article describes a design change in FortiEDR v7.2, where applying filters (such as Handled/Unhandled or Classification) may cause the Event Details pane to show 'No results found'. Scope FortiEDR v7.2 and later Solution Starting in ...

RiverChen · 07-24-2025

Hello Mohammed,To complete each lesson in the FCA - FortiGate 7.6 Operator course: Make sure you fully play through every page until a :white_heavy_check_mark: appears on the right side. Answer all Knowledge Check questions on each page. Once all pag...

RiverChen · 07-02-2025

Hi RWennberg,We have an internal ticket requesting support for ARM64 support for Windows.Tentatively we are expecting it to be supported - ETA Q3 - Q4 of 2025. Windows Collector version 6.1 will include it. Please follow this link for when it becomes...

RiverChen · 02-12-2025

Hi @Langflow, Thanks for the question! To clarify, by design, if you've configured Distribution Lists for email notifications, you will only receive notifications for Security Events and System Events. There is no separate email specifically for devi...

RiverChen · 02-11-2025

Hi @S0ck-Pupp3t, FortiEDR does not send a separate email through the distribution list specifically for device isolation. Instead, when a device executes a malicious file and is automatically isolated, you will receive a Security Event Notification e...

User Statistics

User Activity

Technical Tip: FortiEndpoint collector remains in Default Collector Group due to EMS system profile setting