1. NEXThink Library

1.1. Concept

NEXThink Library is an online central knowledge database composed of two main repositories:

• The resources library contains predefined investigations and categories designed to solve specific problems or support IT operational processes. The resources library is available via a web browser to http://library.nexthink.com or directly into the Finder, in NEXThink Library section.

• The application library contains a extensive collection of binaries pre-tagged with their threat level.

With the Finder, you can:

• add an investigation or a set of investigations to your local user
• add a category or a set of categories if you are the category administrator
• run directly an investigation from the Library
• automatically tag the threat level of your binaries

1.2. Requirements

The following requirements are needed in order to use NEXThink Library:

• Internet access available for NEXThink Finder,
• a license for NEXThink solution with the Library subscription option,
• proxy settings automatic detection. NEXThink Finder detect automatically Windows Internet Explorer proxy settings.

If you do not have the required license, please contact sales@nexthink.com.

2. Retrieving investigations / categories from NEXThink Library

2.1. Browsing the Library

In the Browse tab, the Library can be directly browsed by solution and by sorting the content.

2.2. Searching the Library

The Search tab provides a direct search on the Library.

Investigations and categories in NEXThink Library are available by single unit (object icon) or by pack (folder icon). Single unit investigation can be executed directly from the Library or imported to the Finder. Investigation pack can only be imported to the Finder.

2.3. Running investigations

For single unit investigation, a double-click on the investigation in the Library will directly retrieve and display the result in Finder.

2.4. Importing elements

To save an investigation in your local profile, two options are available:

• while browsing the Library, you can use the add button to add the element to your local collection.

• while previewing a Library investigation, you can use the save button to add the investigation to your local collection.