The Enricher Module enriches process information and provides valuable insights. When you select the Enable Enrichment of Process Guard Events checkbox, the Process Guard submits requests to the Enricher Module for further analysis. The Enricher Module can request acquisition of the executable responsible for the process for investigation. The time required to enrich the data depends on the cached information, and its integration with FireEye products. For more information on the Enricher module, see the FireEye Market.
Note
Install and enable the Enricher Module on the same Endpoint Security Server.
Process Guard Server Enrichment Settings
 |