N-sight: New VSS Monitoring for EDR, More Asset Data for Device Lifecycle Management, Improved Task Output

We are pleased to let you know that we are in the process of rolling out brand new SentinelOne EDR VSS Monitoring Checks in N-sight, helping you proactively monitor for VSS (Volume Shadow Copy Service) issues. We encourage you to explore the new VSS monitoring feature and make use of the enhanced security monitoring it offers.

We are also excited to let you know we will soon be releasing five additional columns to the Asset Inventory View in N-sight, to help with the device lifecycle management of assets: MAC address, BIOS, External IP Address, Asset Added Time, and Asset Age. We’ll be rolling these out in the coming days, so keep an eye out!

Here are all the details…

VSS Monitoring and Alerts for SentinelOne EDR

VSS (Volume Shadow Copy Service) Monitoring allows for the monitoring of the health of VSS snapshots associated with SentinelOne EDR Agents. Users can set the checks to fail based on either the elapsed time since the snapshots were take or the generation of the snapshots. Use check alerts to be notified about any issues related to VSS snapshots, allowing for proactive response and mitigation.

  • VSS Check Output: See summary information of check results for a device
  • VSS Checks – More Information dialog:
  • Alerts: Select the option for Script Checks to receive the VSS related alerts from the Edit Alert Policy dialog.

More Asset Data for Device Lifecycle Management – Coming Soon!

Based on partner feedback, we are adding five new columns with asset data to the Asset Inventory View: MAC address, BIOS, External IP Address, Asset Added Time, and Asset Age.

We’ll be rolling the new columns out to partners across the N-sight territories in the coming days. Here are more details:

  • MAC Address: MAC addresses are essential for technicians to identify devices with accuracy and precision on a network. They play a crucial role in tracking and managing individual devices.

  • BIOS:BIOS details enable technicians to track hardware configurations, versions, and updates for more effective troubleshooting and maintenance.

  • Asset Added Time: The Asset Added Time is based on when the N-sight agent was installed on the device. Now its easy to see when devices were added and it can help technicians to track device onboarding activity across teams.

  • External IP Address: View the external IP address to see which devices are connecting from a particular IP address.

  • Asset Age: Asset age is based on the oldest software install date detected on the endpoint. It is an important metric in IT and asset management, providing insights into the hardware’s lifecycle, potential for obsolescence, and the need for maintenance or upgrades.

Note: Asset Age data is derived from software install dates detected on the endpoint. This is proxy measure for device age, and may not be 100% accurate on every device. For example, if a device undergoes a reimage, it typically reinstalls software with fresh install dates. As a result, the asset age calculation might be affected and the hardware may be considered newer than it is.

Verbose script/task dashboard output – Coming soon!

We will shortly be improving the script output error messaging provided when scripts fail with the error message ‘Invalid Script Parameters”. It means more accurate and useful information to help diagnose and resolve any issues with scripts or endpoints. Here is a before and after screenshot demonstrating the improvement:

Before:

After:

The “More Info” column is now shown as Output – click the link to see more of the failed script’s output for further insight into issues.

Before:

After:

N-sight: Windows RC Agent Update

We have also released a new Windows RC agent, v10.14.2, with general performance updates.

Summary for Service Release
– EDR VSS Check, More Asset Data, Task Output, new Windows RC Agent
– N-sight Console v2024.03.11
– Windows RC Agent 10.14.2

Console v2024.02.28
UPDATE: VSS monitoring for EDR
UPDATE: More Asset Data in the Asset Inventory View
UPDATE: Improved Automated Tasks output

Windows Agent 10.14.2 RC
UPDATE: General performance improvements

This entry was posted in N-sight. Bookmark the permalink.