When a full backup is performed of an Endpoint Security (HX), the following items are included in the backup:
The configuration database. This includes Endpoint Security (HX) configuration settings and some application configuration settings.
The Endpoint Security (HX) database. This includes all Endpoint Security (HX) metadata, including indicators, host sets, false positives, data acquisition scripts, all endpoint information, and other content markers. It also includes accounts and any application settings that are not contained in the configuration database.
PKI information. This includes the CAs, certificates, and keys used for Endpoint Security (HX) communications.
File system data. This includes acquisitions, triages, Enterprise Search data, and current agent images.