Tabs
| Tab | Purpose | Needs |
|---|---|---|
| Shell | Interactive terminal on the host. | Agent connected. |
| Processes | List, kill, suspend, resume. | Agent connected. |
| Files | Browse, preview, hash, collect. | Agent connected. |
| App control | Block and unblock applications. | Agent connected; enforcement options shown per host. |
| Collected files | Files collected from this host, with download. | |
| Triage | Run and view the triage snapshot. | Agent connected. |
| Host | Inventory, log shippers, sensors and security tools. |
The containment card applies and releases isolation; the sensor card shows the collection state.
Sessions
Everything in the panel reaches the host with your identity attached and is recorded in the audit log. Shell sessions use a short-lived ticket bound to you and to that host. Fleet credentials stay on the server.
Offline hosts
Live actions need the agent to be connected. For a host that is offline, the panel shows when it was last seen and the inventory facts on record.