RMM Guard - Not detecting Applications
in progress
M
Matt Jarrett
We use SyncroMSP, and its not detected by ESPM either.
Jason Phelps
Matt Jarrett can you double check this? We definitely are detecting this across our fleet. If not, please open a support ticket with some specific endpoints where you have ESPM enabled and not seeing it showing up!
M
Matt Jarrett
Jason Phelps erm... yes. It was me you were testing it with. Getting me to restart machines so you could detect certificates lol
Jason Phelps
Matt Jarrett so sorry - I see that now. I do see it in your dashboard now so hopefully we're all set there!
C
Chris Ba
Are you shipping Windows Event Logs for those endpoints? This is one of the requirements and why a lot of our endpoints were not showing. This requirement
might
have changed, but was one of the initial requirements I knew was going to limit the number of endpoints I was going to see in RMM Guard.Not sure if it's new or I missed it previously, but on the RMM Guard dashboard, you can click RMM Tool Catalog to see all of the RMMs tools being tracked. They show "52 tools across 5,330 file hashes and 310 code signing certificates." Includes NinjaRMM, Parsec, Teamviewer, AeroAdmin, and Anydesk now.
N
Nathan Schmidt
I'm seeing exact same situation. Currently my dashboard shows Zero Orgs and Zero Endpoints with any RMM, yet I know my tools are installed on these endpoints. Even the approved items aren't showing. Last Seen date is almost 20+ days ago as well.
Chris Bisnett
updated the status to
in progress
Can you email support with the details of which endpoint so we can make sure we get these added to the catalog. Some of these we're tracking in our catalog (Teamviewer and Anydesk), but for some of the others we don't have much information on them. We're constantly expanding the catalog with new RMMs and identifying signing certs and file hashes for the binaries, so any help would be much appreciated.
C
Colton Colton
Chris Bisnett, Ticket #247127 for tracking purposes.
C
Colton Colton
We are starting to items be detected (nomachine, teamviewer, putty). So progress is being made.
P
Paul McDowell
Chris Bisnett It would be great if we could choose processes from an EDR and mark them as RMM, or add them directly in the dashboard when we know they're not detected. I noticed Tactical RMM is not detected either.
Jason Phelps
Paul McDowell You should see Tactical RMM show up your account now! Thanks for bringing this up, we had them in our list but needed to update a couple items in our catalog.