Cyber Triage User’s Guide¶

Cyber Triage^® is incident response software that enables IT and information security incident responders to collect, analyze, and act more quickly when a threat has been identified. With Cyber Triage^® the user can analyze a computer to determine whether or not it was compromised.

This user guide contains all information about how to install and use the Cyber Triage^® software.

If you are evaluating Cyber Triage^® for the first time, refer to the separate Evaluation Guide document for assistance on getting started as quickly as possible.

Deployment Versions¶

There are five versions of Cyber Triage. To make sure you get the most out of this User Manual, ensure you know which you have.

Standard Versions: These versions are desktop applications that allow a single user to perform investigations. Refer to Standard Installation for steps on installing this version.
- Standard Pro: This is the base version with the core features.
- Standard Enterprise: This adds integrations to import telemetry, publish IOCs, etc.
Team Versions: These versions use a self-hosted server and clients to allow collaboration. The user experience is the same as Standard, so most of this document applies to both Standard and Team. Refer to Team Installation and Configuration on installing this version.
- Team: This has the core features of the application
- Enterprise: This adds integrations and access control.
Lite is the free version that does not have analytics. It is a separate installer and data is stored separately from the paid version.

Contents