# Endpoint Security / Antivirus

## Solution
- Product: Not specified in audit
- Managed By: Mike Swanson / azcomputerguru.com

## Deployment Status
- During 2026-03-27 incident: 32 machines scanned clean
- 28 machines were unreachable (offline at time of scan)

## Remote Access Tools
- ScreenConnect (ConnectWise) — deployed across fleet
- Datto RMM agent (CagService)
- GuruRMM Agent (azcomputerguru.com)

## Notes
- AV/EDR product details not captured in audit — need to identify
- Post-incident scan was incomplete (28 machines missed)
- No lateral movement detected from DF-JOEL2 compromise