Endpoint Agent - Data Collected

Endpoint agent collects the following information from each device it is installed on.

User sessions:

• Lock / Unlock time
• Login / Logout time
• Username
• Domain name
• Session ID

BIOS:

• Name
• Manufacturer
• Version
• Serial number

Network:

• Hostname
• Network interfaces:
  • Ipv4 address
  • Ipv6 address
  • MAC address
  • Default gateway
  • Name
  • ID

Computer:

• Domain
• DNS hostname
• Workgroup
• Model
• Manufacturer 

OS:

• OS type
• Language
• Timezone
• User count
• Install date
• Serial number
• Last boot time
• Version
• Country
• Boot device
• OS architecture
• Locale
• Build type
• Build number

Logical devices:

• Device ID
• Device type
• Filesystem
• Free space
• Media type
• Size
• Name
• Volume name
• Volume serial number 

CPU:

• Architecture
• Core count
• Device ID
• Load percentage
• Logical processor count
• Manufacturer
• Max clock speed
• Name
• Processor ID 

RAM:

• Memory type
• Capacity
• Form factor
• Manufacturer
• Serial number
• Speed
• Configured clock speed
• Total width
• Data width
• Device locator 

GPU:

• Dedicated system memory
• Dedicated video memory
• Description
• Device UD
• Revision
• Shared system memory
• Sub system ID
• Vendor ID

Every 5 minutes the agent sends information about system resources, these results include:

RAM:

• Memory available (min/max/average)
• Memory load (min/max/average)
• Total physical memory
• Total virtual memory

CPU:

• Idle time percent (min/max/average)
• User time percent (min/max/average)
• Kernel time percent (min/max/average)
• Processing time percent (min/max/average)

Network Interfaces:

• Bytes received/sent/total
• Current bandwidth
• Packets received/sent/errors/unicast/non-unicast

Wi-Fi Networks:

• SSID
• RX and TX (min/max/average)
• RSSI
• Channel
• Quality (min/max/average)
• BSSID
• BSS type
• Interface id
• Profile name

Logical Drives:

• Disk queue length (min/max/average)
• Disk Read/Write time
• Free space
• Idle time

Battery Status:

• Power source
• Battery state
• Charge level

In addition, the endpoint agent may run network tests such as pings and path traces and post these results. These results contain:

• Source IP
• Destination IP or DNS name
• RTT (min/max/average)
• Jitter (min/max/average)
• Total packets sent/received
• Information about each hop discovered during a path trace:
  • Host/DNS name
  • IP Address
  • ASN
  • Total packets sent/received
  • RTT (min/max/average) for each hop