Why Kenmie may contact you
WatchGuard NDR, Endpoint Security, Total Identity Security, Cloud Detection and Response, Total MDR, and WatchGuard Cloud can surface activity that requires user context or containment. These services are generally managed in the background, so an unexpected Kenmie contact may be your first visible sign of an investigation.
Respond safely
- 1
Verify the contact using a known Kenmie number or an existing support thread if anything seems unusual.
- 2
Answer what you were doing, which device and account were involved, and whether you recognize the activity. Be accurate rather than guessing.
- 3
Follow instructions to stop work, disconnect a device, reset a password, or preserve evidence. Do not erase files, clear history, or power off a device unless directed.
- 4
If a device has been isolated, leave it powered on. Isolation may intentionally block normal network access while allowing security investigation and remediation.
Kenmie will not ask you to disclose a password or one-time authentication code. Enter or approve authentication yourself only after verifying the request.