Factory Sensor Kits March 2025

Sensor Update

Mid March 2025

Sensor Name Category Details of Update
JAMF Connect Not Installed Applications New
JAMF Connect Version Outdated Applications New
JAMF Protect Not Installed Applications New
JAMF Protect Version Outdated Applications New
ThreatLocker Service Disabled Security Software New
Threatlocker Service Stopped Security Software New
Service Stopped or Service Not Running Sensors All Updated all Service Stopped and Service Not Running Sensors for the following:

  • Added the variable Service_Check_Delay

  • Updated service stopped sensors to check the LAST_CHG time for a stopped sensor is CURRENT_TIME - Service_Check_Delay

  • Service name added to the payload so it can be passed to an automation as a parameter.
High ICA Round-Trip Time Citrix Updated expression for averaging.
Azure AD Password Expiration Security Updated to only trigger for logged in users.
Desktop Controller Registration Fail Citrix Updated event ID to 1014 and 1017.

Early March 2025

Sensor Name Category Details of Update
Proofpoint Cloud Service Stopped Security New
Azure AD Grant Token Failure Security New
Syslog Service Not Running System New
Azure Portal Not Installed Applications New
Trellix Agent Not Installed Applications New
Crowdstrike Not Installed Security Software New
CrowdStrike Service Disabled

CrowdStrike Service Stopped

 Security Software Fixed - Modified sensor to avoid false positives.

Updated to support MacOS.
Common Event Log Error System Updated when the sensor is set to trigger.
High Destination Latency Network Updated the variable.
FireFox Outdated Applications New
MS Edge Outdated Applications New
JAMF Pro Service Not Running Management New
Smart Disk Sensor for MAC Disk New
FileVault Off Security New.

Requires agent version 11.2 or newer.
Firewall Status Security Firewall Status supported on macOS systems using agent version 11.2 or newer.
Supervisor Not Installed SysTrack Documented trigger conditions and updated suggested solutions.
Unusual GPO Load Time Policy Fixed - The name of the Group Policy Family that triggered the sensor properly displays.
Service Sensors Multiple Service Sensors now reference the variable Service_Check_Delay which allows you to configure a delay in checking the service. Default 0.