Elastic Docs /
Solutions and use cases /
Security solution /
AlertZero /
Manage AlertZero /
Configure Watches and Workers /
Forensics Watch

Endpoint Analysis Worker

The Endpoint Analysis Worker belongs to the Forensics Watch.

Forensics Watch

Run a Worker manually

View as Markdown
Report a docs issue
Edit this page
Learn how to contribute

Get started free

14-day free trial
All features included
No setup required

Elastic fundamentals
Elastic Stack
Deploy and manage
Solutions and use cases
Manage data
Explore and analyze
Manage your Cloud account and preferences
Troubleshoot
Release notes
Reference
Contribute to the docs
Extend and contribute

Elastic fundamentals
Elastic Stack
Deploy and manage
Solutions and use cases
Manage data
Explore and analyze
Manage your Cloud account and preferences
Troubleshoot
Release notes
Reference
Contribute to the docs
Extend and contribute
Documentation archive
Elastic documentation versions

© 2026 Elasticsearch B.V. All Rights Reserved.

Terms of Use
Privacy