How do I update AIR Responders on assets?

The AIR Responder can be updated in two ways: manually or automatically and both options can be scheduled. By default, updates are set to be manual. However, if AIR Responders on assets maintain a connection to the console from which they were deployed, they are capable of updating themselves automatically. Details on both update options are explained below.

Automatic Responder update

Once a Console update is installed, its associated Responders will automatically receive and execute an update task during their next connection to the updated console. It's important to note that this automatic update behavior is only active if the 'Update asset Responders automatically' setting is enabled, as illustrated in the screenshot below.

Manual Responder update

If the setting selected is, 'Update asset Responders manually (by assigning an upgrade task)' the update task can be generated from the individual Asset page:

You can also manually update Responders by selecting multiple assets. If any of the selected assets require a Responder update, the option to do so will be available to the user through the 'More' option in the Bulk Action bar.

Scheduling options for Responder updates

Scheduling options for Responder updates to streamline the process, ensuring that updates do not delay or disrupt ongoing investigations.

• Scheduled Manual Updates: Users can schedule updates for a specific time for an individual asset or a group of assets. Setting a new update time for an asset will override any previously scheduled time for that asset.

• Scheduled Auto Updates: Users can establish a recurring schedule to automatically check for and apply updates within a designated timeframe.

• The Assets > Settings page allows selection, timezone, times, and days of the week for the task to be executed.

• Alternatively, assets can be scheduled for responder updates either through the individual Asset action button or by using the bulk actions bar.