• Outage Identified: May 9, 2025 15:30:44 UTC
• System Restored: May 9, 2025 17:52:34 UTC

This event is NOT a security event and NOT security related. 

During an engineering unit test today, we experienced an unexpected system outage that may have caused Windows agents to automatically uninstall from your environment. An Adlumin Windows agent re-installation could be required to restore monitoring and protection.

No other data inputs are affected like API’s, Syslog streams, Linux, or MAC endpoints.  

Windows Agent Reinstall Steps:

• If you use a GPO to deploy Adlumin the Adlumin Agent will automatically reinstall everywhere when a GPO runs its cycle
• If you use an RMM tool for automatic software installation the agent will automatically reinstall. Additionally, you should be able to monitor or push out an installation package to ensure all tenant’s agents are pushed out.
• If you do not use either of the above, go to analysis > research and search for this string (Scope the search to today (May 9th)):
  • eventid:1973 && action: “cmd.exe \/C wmic product where name\=\”Adlumin\” call uninstall \/nointeractive”
• Export the list of events to CSV. Use the hostname field to identify devices that need reinstallation.
• Note: You can safely push the Adlumin agent to all devices using your automation. Devices with the agent already installed won’t be affected.

Our support team is available to assist with any reinstallation needs or to answer questions about this incident.

We apologize for any inconvenience this may have caused and thank you for your understanding.