Cyber Triage User’s Guide

Cyber Triage^® is incident response software that enables IT and information security incident responders to collect, analyze, and act more quickly when a threat has been identified. With Cyber Triage^® the user can analyze a computer to determine whether or not it was compromised.

This user guide contains all information about how to install and use the Cyber Triage^® software.

If you are evaluating Cyber Triage^® for the first time, refer to the Evaluation Guide for assistance on getting started as quickly as possible.

Deployment Versions

There are four versions of Cyber Triage. To make sure you get the most out of this User Manual, ensure you know which you have.

Standard Versions: These versions are desktop applications that allow a single user to perform investigations. Refer to Standard Installation for steps on installing this version.
- Standard Pro: This is the base version with the core features.
- Standard Enterprise: This adds integrations to import telemetry, publish IOCs, etc.
Team Versions: These versions use a self-hosted server and clients to allow collaboration. The day-to-day investigation experience is the same as Standard, so most of this document applies to both. However, installation and administration are different for Team - follow the Team Installation Checklist in Team Installation and Configuration rather than skipping ahead to the Standard install steps.
- Team: This has the core features of the application
- Enterprise: This adds AI, integrations, and access control.

Contents