Sensor Update
Mid March 2025
Sensor Name | Category | Details of Update |
|---|---|---|
JAMF Connect Not Installed | Applications | New |
JAMF Connect Version Outdated | Applications | New |
JAMF Protect Not Installed | Applications | New |
JAMF Protect Version Outdated | Applications | New |
ThreatLocker Service Disabled | Security Software | New |
Threatlocker Service Stopped | Security Software | New |
Service Stopped or Service Not Running Sensors | All | Updated all Service Stopped and Service Not Running Sensors for the following:
|
High ICA Round-Trip Time | Citrix | Updated expression for averaging. |
Azure AD Password Expiration | Security | Updated to only trigger for logged in users. |
Desktop Controller Registration Fail | Citrix | Updated event ID to 1014 and 1017. |
Early March 2025
Sensor Name | Category | Details of Update |
|---|---|---|
Proofpoint Cloud Service Stopped | Security | New |
Azure AD Grant Token Failure | Security | New |
Syslog Service Not Running | System | New |
Azure Portal Not Installed | Applications | New |
Trellix Agent Not Installed | Applications | New |
Crowdstrike Not Installed | Security Software | New |
CrowdStrike Service Disabled CrowdStrike Service Stopped | Security Software | Fixed - Modified sensor to avoid false positives. Updated to support MacOS. |
Common Event Log Error | System | Updated when the sensor is set to trigger. |
High Destination Latency | Network | Updated the variable. |
FireFox Outdated | Applications | New |
MS Edge Outdated | Applications | New |
JAMF Pro Service Not Running | Management | New |
Smart Disk Sensor for MAC | Disk | New |
FileVault Off | Security | New. Requires agent version 11.2 or newer. |
Firewall Status | Security | Firewall Status supported on macOS systems using agent version 11.2 or newer. |
Supervisor Not Installed | SysTrack | Documented trigger conditions and updated suggested solutions. |
Unusual GPO Load Time | Policy | Fixed - The name of the Group Policy Family that triggered the sensor properly displays. |
Service Sensors | Multiple | Service Sensors now reference the variable Service_Check_Delay which allows you to configure a delay in checking the service. Default 0. |