How can I tell if EDR has been installed on my machine?

Berkeley IT uses Trellix for our Endpoint Detection and Response software. To see if Trellix has been installed on your university machine, follow these steps based on your operating system.

Apple machines:

Search for a file called “FireEye Helper” in the applications folder

- or -

Open terminal and run:

ps aux | grep xagt

If you get a result that includes this in response to this prompt, Trellix is likely running:

/Library/FireEye/xagt/xagt.app/Contents/MacOS/xagt -M DAEMON 

Windows machines:

Look for this image on your taskbar:

This image shows a black and blue X icon on the taskbar

Linux machines:

Open terminal and run:

ps aux | grep xagt

If you get a result that includes this in response to this prompt, Trellix is likely running:

/opt/fireeye/bin/xagt -M DAEMON

Topics