Factory Sensor Kits May 2025

Sensor Update

Early May 2025

Sensor Name	Category	Details of Update
Proofpoint Cloud Service Disabled	Security Software	New
CheckPoint VPN Service Disabled	VPN	New
Citrix ICA Session Interrupted	Citrix	New
Citrix ICA Session Suspended	Citrix	New
Defined Software Outdated	Applications	New
Frequent Dock Crashes	Applications	New
Frequent Finder Crashes	Applications	New
High System Latency Session	Network	Renamed sensor to Desktop - High ICA Session Latency and changed the category to Citrix.
Citrix Teams HDX Disabled	Applications	Changed the category to Citrix.

Mid May 2025

Sensor Name	Category	Details of Update
ZScaler Port Confict	VPN	Use lower case for the list of exclusions in the query.
Bytes Sent	VMware	Updated the sensor to use a 10 minute average of bytes sent instead of an alarm and added a variable for more granular control.
Bytes Received	VMware	Updated the sensor to use a 10 minute average of bytes received instead of an alarm and added a variable for more granular control.
Broadcast Rate	Network	Updated to use SQL instead of Alarm.
Blast High Latency	VMware	Updated to use SQL instead of Alarm.
Blast High Downlink Packet Loss	VMware	Updated to remove alarm tags, created a variable for the threshold, and a variable for the time the data is aggregated.

Late May 2025

Sensor Name	Category	Details of Update
Windows License Activation Failed	System	New
Desktop Controller Disconnected	Citrix	New
Common Event Log Error	System	Updated sensor name to Common Event Log Message.
Blast High Uplink Packet Loss	VMware	Updated to remove alarm tags, created a variable for the threshold, and a variable for the time the data is aggregated.
Blast High Estimated Uplink Bandwidth	VMware	Updated to remove alarm tags, created a variable for the threshold, and a variable for the time the data is aggregated.
Blast High Estimated Downlink Bandwidth	VMware	Updated to no longer use a SysTrack alarm as input.
Audio Bytes Received	VMware	Updated to no longer use a SysTrack alarm as input.
Device Manager Status	System	Updated with new error codes.
Firewall Disabled Private GPO Firewall Disabled Public GPO Windows Defender Firewall Disabled for Domain Windows Defender Firewall Disabled for Private Windows Defender Firewall Disabled for Public	Security	Updated Windows Defender Firewall Sensors to check every 5 minutes.
DPC Rate	System	Updated to remove alarm tags, created a variable for the threshold, and a variable for the time the data is aggregated.
Add-Ins Not Loading	Microsoft Office	Updated to include Add-In name.
Amazon EC2Launch Amazon SSM Agent AWS Lite Agent Service Stopped DCV Server SkyLight WkSp CFG Srvc Stopped WSP Adapter for DCV	Virtualization	Updated to only allow for evaluation on AWS systems.