Camio on VMware ESXi, Slack, Schedules and more | by Carter Maslan | Camio

Camio on VMware ESXi, Slack, Schedules and more

Carter Maslan

· 2 min read · Sep 3, 2020
28

This update covers new capabilities to deploy remotely, receive alerts in Slack, and investigate quickly using schedules.

As always, please ping us anytime with requests for demos, articles, sales collateral or other tools that help you drive the shift from evidence collection to proactive security!

Virtual Installations

Large manufacturers and fulfillment centers often need to deploy Camio quickly for social distancing and mask detection. Many of them use VMware ESXi, so we’ve included detailed setup instructions in this new help article: How to set up a Camio Box VM in VMware ESXi vSphere

Camio Box VM runs on VMware ESXi.

Running the Camio Box VM on VMware ESXi provides a few key advantages:

  1. On-premise efficiencies via edge computing power of the GPU accessible via Type 1 Hypervisor that reduces uplink bandwidth;
  2. Simpler administration from client computers using native remote interface.
  3. Native networking that eliminates the need for NAT/Bridged host OS networking.

Checklist for remote installation

COVID-19 makes on-site visits harder, so there’s also a new guide to deploying Camio remotely. Here is a checklist that includes the minimum information required and the common ways things can go wrong: Checklist for Remote Installation

Getting alerts in Slack

The new Camio Slack App delivers your Camio pinned query alerts to the channels you choose. It takes 18 seconds to connect any channel.

Get pinned query alerts delivered to any channel with the Camio Slack App.

Slash commands are also included to search quickly from within Slack. For example, check whether you missed FedEx or UPS with /camio fedex or ups

The schedule: operator

Browsing a particular time of day across multiple days is now easier with the schedule: search operator. For example, to see everyone that left a building between 5pm and 6pm on a weekday over the past ten days, use this query:

people 10 days ago schedule: 5pm to 6pm weekdays

As you scroll through the 10 days of results, you’ll see only the events that happened in that 5–6pm hour each day. You can even use multiple schedules. For example, this query covers people only after business hours on a weekday or 24 hours per day on the weekends:

people 2 weeks ago schedule: 5pm to 8am weekdays, 12am to 12am weekends

Learn more in Fast Investigations Using Schedules.