Investigate Endpoints - Administrator Guide - Cortex XDR - Cortex - Security Operations

Within the scope of endpoint investigation you can review the Action Center, view endpoint details, retrieve files and support logs, and scan the endpoint.