The report output shows the number of endpoints that have forensic inventory data collection
enabled, which is a feature of Cortex XDR that allows the collection of detailed information about the
endpoint’s hardware, software, and network configuration. This feature helps analysts to investigate
and respond to incidents more effectively by providing a comprehensive view of the endpoint’s state
and activity. Forensic inventory data collection can be enabled or disabled per policy in Cortex
XDR. Reference:
Forensic Inventory Data Collection
Cortex XDR 3: Getting Started with Endpoint Protection
