--- title: "EDR with Forensics (EDRF) Documentation" slug: "edr-with-forensics-edrf-documentation" tags: ["EDR with Forensics (EDRF)", "Endpoint Security"] updated: 2026-09-16T07:09:05Z published: 2026-09-16T07:09:05Z canonical: "docs.trellix.com/edr-with-forensics-edrf-documentation" stale: true --- > ## Documentation Index > Fetch the complete documentation index at: https://docs.trellix.com/llms.txt > Use this file to discover all available pages before exploring further. # EDR with Forensics (EDRF) Documentation ### ![Icon_GetStarted.png](https://cdn.us.document360.io/0d453a50-e1da-4d4a-9409-fea7959614d8/Images/Documentation/uuid-f2b65ebb-b2b0-5442-8896-8f6c8b25e925.png?sv=2026-02-06&spr=https&st=2026-11-12T03%3A36%3A10Z&se=2026-11-12T04%3A36%3A10Z&sr=c&sp=r&sig=XXKRldsVVo1RNIvrnNgikSkj0590mUaL0J0ZI2muJ5Q%3D) Basics - [EDRF overview](/v1/docs/edrf-overview) - [How it works](/v1/docs/how-edrf-works) - [Product compatibility](/v1/docs/system-requirements-27) - [Network ports](/v1/docs/network-ports-and-url-allow-list) ### ![Icon_Deploy.png](https://cdn.us.document360.io/0d453a50-e1da-4d4a-9409-fea7959614d8/Images/Documentation/uuid-3395ac41-7125-30e3-82c4-723b0c25dcf9.png?sv=2026-02-06&spr=https&st=2026-11-12T03%3A36%3A10Z&se=2026-11-12T04%3A36%3A10Z&sr=c&sp=r&sig=XXKRldsVVo1RNIvrnNgikSkj0590mUaL0J0ZI2muJ5Q%3D) Deploy - [Deploy EDRF using ePO - SaaS](/v1/docs/deploy-edrf-using-epo-saas) - [Deploy EDRF using ePO - On-Prem](/v1/docs/deploy-edrf-using-epo-on-prem) - [Upgrade options using ePO - SaaS](/v1/docs/upgrade-options-using-epo-saas) - [Upgrade options using ePO - On-Prem](/v1/docs/upgrade-options-using-epo-on-prem) ### ![Icon_Configure_V2.png](https://cdn.us.document360.io/0d453a50-e1da-4d4a-9409-fea7959614d8/Images/Documentation/uuid-9fed35f5-cc05-a75e-af8a-e3ffea833702.png?sv=2026-02-06&spr=https&st=2026-11-12T03%3A36%3A10Z&se=2026-11-12T04%3A36%3A10Z&sr=c&sp=r&sig=XXKRldsVVo1RNIvrnNgikSkj0590mUaL0J0ZI2muJ5Q%3D) Get started - [Activate your Trellix account](/v1/docs/activate-your-trellix-account) - [How to access EDRF](/v1/docs/how-to-access-edrf) - [Add Endpoint Security (HX) server to ePO - On-Prem](/v1/docs/add-endpoint-security-hx-server-to-epo-on-prem) - [Configure EDRF policies](/v1/docs/configure-edrf-policies) ### ![Icon_Detect_V2.png](https://cdn.us.document360.io/0d453a50-e1da-4d4a-9409-fea7959614d8/Images/Documentation/uuid-347f6e1c-c897-b8e8-637f-04a902d52090.png?sv=2026-02-06&spr=https&st=2026-11-12T03%3A36%3A10Z&se=2026-11-12T04%3A36%3A10Z&sr=c&sp=r&sig=XXKRldsVVo1RNIvrnNgikSkj0590mUaL0J0ZI2muJ5Q%3D) EDRF On-Prem - [What is EDRF On-prem?](/v1/docs/edrf-on-prem-overview) - [How EDRF On-prem works](/v1/docs/how-edrf-on-prem-works) - [EDRF On-prem installation](/v1/docs/edrf-on-prem-installation) - [Historical Search Module](/v1/docs/historical-search-module) ### ![Icon_Admin.png](https://cdn.us.document360.io/0d453a50-e1da-4d4a-9409-fea7959614d8/Images/Documentation/uuid-841c66d2-2a42-154d-8467-1517055a4654.png?sv=2026-02-06&spr=https&st=2026-11-12T03%3A36%3A10Z&se=2026-11-12T04%3A36%3A10Z&sr=c&sp=r&sig=XXKRldsVVo1RNIvrnNgikSkj0590mUaL0J0ZI2muJ5Q%3D) EDRF personas - [IT admins](/search?labelkey=pers-it-admin&rpp=50) - [Security analysts](/search?labelkey=pers-soc-ana&rpp=50) - [Incident responders](/search?labelkey=pers-in-resp&rpp=50) - [Persona definitions](/v1/docs/edrf-personas) ### ![Icon_Articles.png](https://cdn.us.document360.io/0d453a50-e1da-4d4a-9409-fea7959614d8/Images/Documentation/uuid-34b1bcc7-ee32-d64d-589c-63859a34e4d3.png?sv=2026-02-06&spr=https&st=2026-11-12T03%3A36%3A10Z&se=2026-11-12T04%3A36%3A10Z&sr=c&sp=r&sig=XXKRldsVVo1RNIvrnNgikSkj0590mUaL0J0ZI2muJ5Q%3D) Related articles - [Known issues - KB000014081](https://support.trellix.com/s/article/000014081) - [Cloud threat detection updates - KB000015254](https://support.trellix.com/s/article/000015254) - [Supported platforms - KB000014084](https://support.trellix.com/s/article/000014084) - [Port requirements on ePO - KB66797](https://support.trellix.com/s/article/KB66797) ### ![Icon_Videos.png](https://cdn.us.document360.io/0d453a50-e1da-4d4a-9409-fea7959614d8/Images/Documentation/uuid-5013c616-1631-806b-9e10-2cacc6a76d0e.png?sv=2026-02-06&spr=https&st=2026-11-12T03%3A36%3A10Z&se=2026-11-12T04%3A36%3A10Z&sr=c&sp=r&sig=XXKRldsVVo1RNIvrnNgikSkj0590mUaL0J0ZI2muJ5Q%3D) [Video shorts](/v1/docs/video-shorts) ### ![Icon_UseCases.png](https://cdn.us.document360.io/0d453a50-e1da-4d4a-9409-fea7959614d8/Images/Documentation/uuid-fc40f6e2-f383-f668-fb43-256046892eff.png?sv=2026-02-06&spr=https&st=2026-11-12T03%3A36%3A10Z&se=2026-11-12T04%3A36%3A10Z&sr=c&sp=r&sig=XXKRldsVVo1RNIvrnNgikSkj0590mUaL0J0ZI2muJ5Q%3D) [Use cases](/search?labelkey=usecase&rpp=50) ### ![Icon_APIs.png](https://cdn.us.document360.io/0d453a50-e1da-4d4a-9409-fea7959614d8/Images/Documentation/uuid-dd7ec88b-2ba6-8489-8ce6-852b93790657.png?sv=2026-02-06&spr=https&st=2026-11-12T03%3A36%3A10Z&se=2026-11-12T04%3A36%3A10Z&sr=c&sp=r&sig=XXKRldsVVo1RNIvrnNgikSkj0590mUaL0J0ZI2muJ5Q%3D) [EDRF APIs](/v1/docs/edrf-apis)