Iru Adds Remote Shell for Investigating Isolated Macs
Summary
Iru says its EDR Remote Shell lets administrators investigate detections, stop processes and retrieve forensic files from managed Macs, including devices under partial isolation. Complete isolation blocks shell access; Windows support is planned.
Key points
- Iru Remote Shell opens a terminal from a detection and displays it alongside the alert and device details.
- Iru says administrators can use the shell to investigate threats, stop malicious processes and retrieve forensic files into the console.
- The feature remains available under partial isolation, which blocks network access while keeping Iru’s control channel open.
- Complete isolation blocks Remote Shell access; Iru advises choosing partial isolation when investigation is expected.
- Remote Shell is included with Iru EDR and offered as an add-on for Iru Endpoint Management customers without EDR.
- The feature launches on macOS, with Windows support to follow.
Article Details
- Event Type
- Product feature launch
- Impact
- Remote Shell lets administrators investigate managed Macs from a detection window, run commands, stop malicious processes, and retrieve forensic files. It remains accessible during partial isolation while Iru’s control channel is open; complete isolation blocks the shell. It is available on macOS at launch, with Windows to follow.