Skip to content

Inventory & hardware

The agent periodically ships an inventory snapshot to the hub. You can force a fresh scan with the “Rescan inventory” button on the agent detail page. The views are OS-aware: a Windows machine never shows Linux terminology (and vice versa).

CategoryLinux sourceWindows source
System (model, serial, chassis)dmidecode / sysfsWin32_ComputerSystem(Product)
CPU & memory/proc/cpuinfo, /proc/meminfoWin32_Processor, CIM
Network cards (duplex, speed, MAC, IP)/sys/class/netGet-NetAdapter
Wi-Fi (SSID, signal, channel, band, Mbps)iw / nmcli when presentnetsh wlan show interfaces
GPU (driver, VRAM, resolution)n/aWin32_VideoController
RAM modules per slot (capacity, speed, manufacturer, part number)n/aWin32_PhysicalMemory
USB devicesn/aWin32_PnPEntity (USB class)
Battery (charge, wear, cycles)/sys/class/power_supplyWin32_Battery + BatteryStaticData
Temperature/sys/class/thermalMSAcpi_ThermalZoneTemperature
Disks + S.M.A.R.T.lsblk + smartctlGet-PhysicalDisk + StorageReliabilityCounter
Swap / pagefile/proc/swapsWin32_PageFileUsage

GPU, RAM modules, USB, battery and temperature appear as separate panels on the Hardware tab as soon as the agent reports them. On Windows this requires agent version 0.1.0+20260731 or newer.

FieldLinuxWindows
Accounts/etc/passwd (+ shadow ageing)Get-LocalUser + Win32_UserProfile
Originn/alocal, domain, azuread or ms-account (PrincipalSource)
Privilegessudo membership, SSH keysAdministrators group
Host domain statusn/adomain-joined and Azure AD-joined, shown on Hardware
  • Linux: /etc/login.defs and /etc/security/pwquality.conf (max/min age, minlen, credits, dictcheck).
  • Windows: secedit /export, [System Access] section: minimum length, maximum and minimum age, history, complexity requirement and the full lockout policy (threshold, duration, window). Values that indicate a weak policy (e.g. minimum length 0, lockout disabled) are flagged.

See Application dependencies for lockfile scanning and OS package CVE matching.