Endpoints generate inventories to track new and deleted applications.
To monitor endpoint inventories collected by the server, go to Logs > Query. Then, under Log type to query, select Endpoint inventory, and then look at the Inventory Received column.
Endpoint Application Control collects endpoint inventories based on the following events:
Event |
Reason Inventory is Collected |
---|---|
Agent installed |
After installation, the agent performs a baseline endpoint inventory. |
Interval of time passed |
Periodically updating endpoint inventories ensures that audits of endpoint applications are accurate. To configure the interval, go to the Add or Edit Policy screen and then expand User experience. See Policies Screen and Policy User Experience. |
Lockdown rule applied |
Lockdown rules allow all currently-installed applications. Therefore, a complete and up-to-date endpoint inventory is required. Immediately after deploying a Lockdown rule, the following occurs:
|
Endpoint inventories contain a list of applications on the endpoint, including the following application types:
Group |
Application Type |
---|---|
Windows executables |
|
Windows Store executables |
|