Skip to content

Inventory & hardware

The agent periodically ships an inventory snapshot to the hub. You can force a fresh scan with the “Rescan inventory” button on the agent detail page. The views are OS-aware: a Windows machine never shows Linux terminology (and vice versa).

Category Linux source Windows source
System (model, serial, chassis) dmidecode / sysfs Win32_ComputerSystem(Product)
CPU & memory /proc/cpuinfo, /proc/meminfo Win32_Processor, CIM
Network cards (duplex, speed, MAC, IP) /sys/class/net Get-NetAdapter
Wi-Fi (SSID, signal, channel, band, Mbps) iw / nmcli when present netsh wlan show interfaces
GPU (driver, VRAM, resolution) n/a Win32_VideoController
RAM modules per slot (capacity, speed, manufacturer, part number) n/a Win32_PhysicalMemory
USB devices n/a Win32_PnPEntity (USB class)
Battery (charge, wear, cycles) /sys/class/power_supply Win32_Battery + BatteryStaticData
Temperature /sys/class/thermal MSAcpi_ThermalZoneTemperature
Disks + S.M.A.R.T. lsblk + smartctl Get-PhysicalDisk + StorageReliabilityCounter
Swap / pagefile /proc/swaps Win32_PageFileUsage

GPU, RAM modules, USB, battery and temperature appear as separate panels on the Hardware tab as soon as the agent reports them. On Windows this requires agent version 0.1.0+20260731 or newer.

Field Linux Windows
Accounts /etc/passwd (+ shadow ageing) Get-LocalUser + Win32_UserProfile
Origin n/a local, domain, azuread or ms-account (PrincipalSource)
Privileges sudo membership, SSH keys Administrators group
Host domain status n/a domain-joined and Azure AD-joined, shown on Hardware
  • Linux: /etc/login.defs and /etc/security/pwquality.conf (max/min age, minlen, credits, dictcheck).
  • Windows: secedit /export, [System Access] section: minimum length, maximum and minimum age, history, complexity requirement and the full lockout policy (threshold, duration, window). Values that indicate a weak policy (e.g. minimum length 0, lockout disabled) are flagged.

See Application dependencies for lockfile scanning and OS package CVE matching.