User Cannot Communicate Externally or Files Modification Activity Is Blocked

Microsoft Windows-based Devices

The Windows Event Viewer records whenever a FortiEDR Collector blocks communication from a device or file modification related to ransomware activity. This information is recorded in the Windows Event Viewer log located in the following location: Event Viewer > Windows Logs > Application.

MacOS-based Devices

The MacOS console records whenever a FortiEDR Collector blocks communication from a device or file modification related to ransomware activity. This information is recorded in the MacOS console log located in the following location: Applications > Utilities > Console > All Messages, as shown below: