Bulk Acquisitions
Bulk Acquisitions are an Endpoint Security (HX) API only feature that allows an analyst to run acquisitions at scale. In order to utilize this feature, the controller must be running with an HX_ADVANCED license.
Ensure that your acquisition script is prepared and that you've set the Background Scheduler Credentials.
From the HXTool main menu, select Acquisitions and then choose Bulk Acquisitions from the sub-menu. Click New Bulk Acquisition and you should see the following dialog:
- Enter a name for your Bulk Acquisition job
- Select a script, this can either be a script on your computer or one that has already been uploaded to HXTool
- Select the host set which you'll be running the script against
- Configure your desired schedule options
- Optionally select a Task Profile
Click Submit - your Bulk Acquisition job should show within a several seconds.