Here's How the Sekoia Endpoint Agent Works

This blog post presents Sekoia's Endpoint Agent, detailing how it collects and normalizes host event logs (in Elastic Common Schema), forwards them to the Sekoia SOC platform over HTTPS, and supports Windows and Linux environments. It covers installation steps (including optional Sysmon), configuration (YAML for app logs, region selection, proxies, and automatic updates), features like offline buffering, low resource usage, log integrity preservation, and ongoing enhancements driven by the Threat Detection & Research team.