Features Disabled by Default

The following table includes a list of main product features that are disabled by default, and specifies how to enable each feature.

Note

For a list of scenarios where a machine reboot is required, see When is a machine reboot required?

Feature	Product Area	How to Enable
Anti-Ransomware (using canary files)	NGAV	Enable in a sensor policy in the Anti-Ransomware screen
Application control	Detection	Enable in a sensor policy in the App Control screen
Anti-Malware Artificial Intelligence analysis	NGAV	Enable in a sensor policy in the Anti-Malware screen
Anti-Ransomware (using canary files)	NGAV	Enable in a sensor policy in the Anti-Ransomware screen or Enable via command line
Application control	Detection	Enable in a sensor policy in the App Control screen or Enable via command line
Artificial Intelligence analysis	NGAV	Enable in a sensor policy in the Anti-Malware screen or Enable via command line
Behavioral execution prevention	NGAV	Enable in a sensor policy in the Behavioral Execution Prevention
Command line-based on-demand Anti-Malware scans	NGAV	Contact Technical Support
Decommission sensors	Sensor Management	Contact Technical Support
Device Controls screen	Endpoint controls	Contact Technical Support
Endpoint controls	Endpoint controls	Contact Customer Success to add this feature
Endpoint machine notifications and Endpoint UI settings (icon/notifications)	User Management	Enable via UI > Policy Management
Exploit protection	NGAV	Enable in a sensor policy in the Exploit Protection screen
Deploy and run incident response tools	Incident Response	Contact your Customer Success Manager to purchase DFIR package
Deploy and run forensic data ingestion tools	Incident Response	Contact your Customer Success Manager to purchase DFIR package
File event collection	Detection	Enable in the Collection features screen of sensor policy
Live File search	Response	Contact Customer Success to purchase DFIR package
Mac AV	NGAV	Enable in a sensor policy in the Anti-Malware screen
Malware alert via syslog	NGAV	Contact Technical Support
Non-Executable file data collection	Detection	Enable in a sensor policy in the Collection features screen
Predictive ransomware protection	NGAV	Enable in the Predictive Ransomware Protection screen of a sensor policy
Predictive Request Times of Investigation Queries	Hunt	Contact Technical Support (if you have the new Data Platform infrastructure)
Fileless protection (previously named PowerShell and .NET)	NGAV	Enable in a sensor policy in the Fileless Protection screen
Registry event collection	Detection	Enable in the Collection features screen of sensor policy
Remote Shell	Response	For Windows machines, contact Technical Support. For Mac and Linux machines, contact Customer Success to add this feature to your environment.
Remote Shell Unrestricted Mode	Response	Contact Technical Support
Right click on-demand Anti-Malware scans	NGAV	Contact Technical Support
Scheduled scan (full/quick scan)	NGAV	Enable in a sensor policy in the Anti-Malware screen
Signature-based analysis	NGAV	Enable in a sensor policy in the Anti-Malware screen
Signature-based analysis - advanced configuration options	NGAV	Contact Technical Support
Single Sign On	User Management	Contact Technical Support
Sensor grouping	Sensor management	Contact Technical Support
System Viewer Role	User permissions	Contact Technical Support
Variant file prevention	NGAV	Enable in a sensor policy in the Anti-Malware screen
Variant payload prevention	NGAV	Enable in a sensor policy in the Behavioral Execution Prevention screen

Related resources

• Supported Features by Operating System

• When is a sensor reinstall required?