6. Configuring Remote Systems for Collection¶
This section outlines some techniques that may need to be done on a remote system to get the full functionality of Cyber Triage®.
Cyber Triage® will work without any of these being performed, but you will have better results if you follow them.
6.1. Allow Remote Connections with Local Accounts¶
If you are using a local administrator account on the remote system (instead of a domain account) and you want Cyber Triage® to push the collection tool using the Live Collection - Automatic mode, then you will need to enable remote administration for local accounts on that system.
regedit.exeWindows program on the target computer.
Navigate to the
Right click on the System node to add a REG_DWORD value with a name of
LocalAccountTokenFilterPolicy(no quotes) and a value of
Reboot the system so new policy is applied