Troubleshooting Tip: Exception creation failure

kmikhaylov · 12-05-2025

Description This article describes how to remove 'Disconnected (Expired)' collectors in a single step. Scope FortiEDR v.6+. Solution If the FortiEDR does not connect to the Aggregator for 30+ days, its state changes to 'Disconnected (Expired)': It is...

kmikhaylov · 10-07-2025

Description This article describes how to log and search for PowerShell commands executed in interactive mode in Threat Hunting. Scope FortiEDR version 5.2 and above. Solution With FortiEDR, it is possible to log and search for PowerShell commands ex...

kmikhaylov · 10-17-2023

Description This article describes how to work with FortiEDR Connect (remote shell). Scope FortiEDR version 5.2 and above. Solution The FortiEDR Connect feature opens a console that provides direct access to a FortiEDR-protected device running a v5.2...

kmikhaylov · 10-11-2023

Description This article describes how to fix the errors 'Users in Exceptions are supported only with Collectors V4.5 and above', 'Selecting both is not supported with V4 Collectors' during exceptions creation. Scope FortiEDR version 5 and above. Sol...

kmikhaylov · 06-12-2023

Description This article describes how to setup FortiEDR exclusions. Scope FortiEDR version 5.2 and above. Solution Exclusions functionality requires Manager and Collector version 5.2 and above. FortiEDR security policies can be divided into 2 groups...

User Statistics

User Activity

Technical Tip: FortiEDR: 'Disconnected (Expired)' collectors batch remove

Technical Tip: How to log PowerShell commands executed in interactive mode in Threat Hunting

Technical Tip: How to work with FortiEDR Connect