---
title: Endpoint Analysis Worker
description: Find what the AlertZero Endpoint Analysis Worker does, what it needs, its settings, and where its work appears in Elastic Security.
url: https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/9118/solutions/security/alertzero/watches/endpoint-analysis-worker
products:
  - Elastic Cloud Serverless
  - Elastic Documentation
  - Elastic Security
applies_to:
  - Serverless Security projects: Preview
  - Elastic Stack: Planned
---

# Endpoint Analysis Worker
The Endpoint Analysis Worker belongs to the [Forensics Watch](https://docs-v3-preview.elastic.dev/elastic/docs-content/pull/9118/solutions/security/alertzero/watches/forensics-watch).