---
title: "Endpoint Detection and Response with Forensics (EDRF)"
slug: "endpoint-detection-and-response-with-forensics-edrf"
tags: ["EDR with Forensics (EDRF)", "Endpoint Security"]
status: "update"
updated: 2026-10-26T14:19:07Z
published: 2026-10-26T14:19:07Z
canonical: "docs.trellix.com/endpoint-detection-and-response-with-forensics-edrf"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.trellix.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Endpoint Detection and Response with Forensics (EDRF)

### ![Illustration showing a checklist with marked items and a confirmation symbol.](https://cdn.us.document360.io/0d453a50-e1da-4d4a-9409-fea7959614d8/Images/Documentation/basic.png?sv=2026-02-06&spr=https&st=2026-11-12T04%3A28%3A14Z&se=2026-11-12T05%3A28%3A14Z&sr=c&sp=r&sig=fGRBT%2Bc5KnbRoBy4bqZKRiLf2YDxO5Oat9rObFE9n7U%3D)Basics

[EDRF overview](/v1/docs/edrf-overview)

[How it works](/v1/docs/how-edrf-works)

[Product compatibility](/v1/docs/system-requirements-27)

[Network ports](/v1/docs/network-ports-and-url-allow-list)

### ![Cloud icon with an upward arrow, symbolizing data upload or cloud storage.](https://cdn.us.document360.io/0d453a50-e1da-4d4a-9409-fea7959614d8/Images/Documentation/deploy.png?sv=2026-02-06&spr=https&st=2026-11-12T04%3A28%3A14Z&se=2026-11-12T05%3A28%3A14Z&sr=c&sp=r&sig=fGRBT%2Bc5KnbRoBy4bqZKRiLf2YDxO5Oat9rObFE9n7U%3D)Deploy

[Deploy EDRF using ePO - SaaS](/v1/docs/deploy-edrf-using-epo-saas)

[Deploy EDRF using ePO - On-Prem](/v1/docs/deploy-edrf-using-epo-on-prem)

[Upgrade options using ePO - SaaS](/v1/docs/upgrade-options-using-epo-saas)

[Upgrade options using ePO - On-Prem](/v1/docs/upgrade-options-using-epo-on-prem)

### ![A stylized cloud icon representing weather or environmental themes.](https://cdn.us.document360.io/0d453a50-e1da-4d4a-9409-fea7959614d8/Images/Documentation/get-started.png?sv=2026-02-06&spr=https&st=2026-11-12T04%3A28%3A14Z&se=2026-11-12T05%3A28%3A14Z&sr=c&sp=r&sig=fGRBT%2Bc5KnbRoBy4bqZKRiLf2YDxO5Oat9rObFE9n7U%3D)Get started

[Activate your Trellix account](/v1/docs/activate-your-trellix-account)

[How to access EDRF](/v1/docs/how-to-access-edrf)

[Add Endpoint Security (HX) server to ePO - On-Prem](/v1/docs/add-endpoint-security-hx-server-to-epo-on-prem)

[Configure EDRF policies](/v1/docs/configure-edrf-policies)

### ![A colorful logo featuring a circular design with arrows indicating movement and direction.](https://cdn.us.document360.io/0d453a50-e1da-4d4a-9409-fea7959614d8/Images/Documentation/edrf-onprem.png?sv=2026-02-06&spr=https&st=2026-11-12T04%3A28%3A14Z&se=2026-11-12T05%3A28%3A14Z&sr=c&sp=r&sig=fGRBT%2Bc5KnbRoBy4bqZKRiLf2YDxO5Oat9rObFE9n7U%3D)EDRF On-Prem

[What is EDRF On-prem?](/v1/docs/edrf-on-prem-overview)

[How EDRF On-prem works](/v1/docs/how-edrf-on-prem-works)

[EDRF On-prem installation](/v1/docs/edrf-on-prem-installation)

[Historical Search Module](/v1/docs/historical-search-module)

### Related articles

[Known issues - KB000014081](https://support.trellix.com/s/article/000014081?language=en_US)

[Cloud threat detection updates - KB000015254](https://support.trellix.com/s/article/000015254)

[EDRF and Xagent IOC content updates - 000015899](https://support.trellix.com/s/article/000015899)

[Supported platforms - KB000014084](https://support.trellix.com/s/article/000014084?language=en_US)

[Port requirements on ePO - KB66797](https://support.trellix.com/s/article/KB66797?language=en_US)

### Technical Resources

[Video Shorts](/v1/docs/video-shorts)

[EDRF APIs](/v1/docs/edrf-apis)