Sensor Update
Early May 2025
Sensor Name | Category | Details of Update |
|---|---|---|
Proofpoint Cloud Service Disabled | Security Software | New |
CheckPoint VPN Service Disabled | VPN | New |
Citrix ICA Session Interrupted | Citrix | New |
Citrix ICA Session Suspended | Citrix | New |
Defined Software Outdated | Applications | New |
Frequent Dock Crashes | Applications | New |
Frequent Finder Crashes | Applications | New |
High System Latency Session | Network | Renamed sensor to Desktop - High ICA Session Latency and changed the category to Citrix. |
Citrix Teams HDX Disabled | Applications | Changed the category to Citrix. |
Mid May 2025
Sensor Name | Category | Details of Update |
|---|---|---|
ZScaler Port Confict | VPN | Use lower case for the list of exclusions in the query. |
Bytes Sent | VMware | Updated the sensor to use a 10 minute average of bytes sent instead of an alarm and added a variable for more granular control. |
Bytes Received | VMware | Updated the sensor to use a 10 minute average of bytes received instead of an alarm and added a variable for more granular control. |
Broadcast Rate | Network | Updated to use SQL instead of Alarm. |
Blast High Latency | VMware | Updated to use SQL instead of Alarm. |
Blast High Downlink Packet Loss | VMware | Updated to remove alarm tags, created a variable for the threshold, and a variable for the time the data is aggregated. |
Late May 2025
Sensor Name | Category | Details of Update |
|---|---|---|
Windows License Activation Failed | System | New |
Desktop Controller Disconnected | Citrix | New |
Common Event Log Error | System | Updated sensor name to Common Event Log Message. |
Blast High Uplink Packet Loss | VMware | Updated to remove alarm tags, created a variable for the threshold, and a variable for the time the data is aggregated. |
Blast High Estimated Uplink Bandwidth | VMware | Updated to remove alarm tags, created a variable for the threshold, and a variable for the time the data is aggregated. |
Blast High Estimated Downlink Bandwidth | VMware | Updated to no longer use a SysTrack alarm as input. |
Audio Bytes Received | VMware | Updated to no longer use a SysTrack alarm as input. |
Device Manager Status | System | Updated with new error codes. |
Firewall Disabled Private GPO | Security | Updated Windows Defender Firewall Sensors to check every 5 minutes. |
DPC Rate | System | Updated to remove alarm tags, created a variable for the threshold, and a variable for the time the data is aggregated. |
Add-Ins Not Loading | Microsoft Office | Updated to include Add-In name. |
Amazon EC2Launch | Virtualization | Updated to only allow for evaluation on AWS systems. |