Agent settings

Coro provides endpoint device monitoring capabilities through the Agent:

Heartbeat interval

Defines how often Coro pings devices to monitor their security status.

Tamper protection

Prevents users and certain types of malware from tampering with important security features, disabling protection, or terminating the Agent.

Visibility mode

Generates events and sends notifications to end users without performing any automatic remediation. Windows devices only.

Self-update

Configures the Coro Agent to auto-update when new versions are released.

Advanced threat control

Monitors active processes for known and potential threats, and blocks processes (that are not explicitly allowlisted) that exhibit suspicious behavior.

Secured shadow backup protection

Enforces backup snapshots every four hours and blocks processes that exhibit risks to the backup. Windows devices only.

Enhanced EDR block mode

Enables Enhanced EDR (endpoint detection and response) block mode to ensure access to timely data that may otherwise be suppressed by the environment.

Initial scan

Configures the Coro Agent to perform an initial malware and ransomeware scan upon installation.