Stored Syncro Agent Data
Table of Contents
This reference document describes what data the Syncro Agent collects and stores from managed assets.
Overview
At a minimum, for every asset with the Syncro Agent installed, we store:
- Installed applications detected on the asset
- Application name
- Vendor
- Version number
- Installed on date
- Windows patches
- Currently available patches
- Any patches installed after the agent is installed
Asset Fields
Use this reference to look up the additional fields the Syncro Agent collects and stores for each asset, in addition to those listed above.
| Field | Description |
|---|---|
| account_id | The Syncro account ID stored in Syncro's internal account database. |
| agent_version | The latest installed version of the Syncro agent. |
| av instance_id | If the managed Webroot integration is activated on the asset, the Webroot instance ID. |
| av machine_id | If the managed Webroot integration is activated on the asset, the Webroot machine ID. |
| av version | The AV version, if available. |
| bios_release_dates | The installation date of the asset's current BIOS version. |
| bitlocker | Contains all the information below for the asset’s BitLocker and TPM status: |
| last_checked_at | The last time the agent checked the asset’s BitLocker and TPM status. |
| supported | Boolean value indicating whether the asset’s Windows edition supports BitLocker management. Is false for editions without BitLocker, such as Windows Home. |
| tpm_specification_version | The TPM specification version (e.g., 2.0). |
| tpm_status | The status of the asset’s Trusted Platform Module (TPM) (e.g., Enabled and Activated, Disabled, TPM Not Detected). Is blank if the asset reported no TPM information. |
| bitlocker > volumes | Contains all the information below for each BitLocker-managed volume on the asset: |
| encryption_percentage | How much of the volume is encrypted, as a percentage (0 to 100). Is blank if not reported. |
| encryption_status | The volume’s encryption state (Fully Encrypted, Encrypting, Decrypting, Not Encrypted, Encryption Suspended, Decryption Suspended, or Unknown). |
| key_protectors | A list of the key protector types on the volume (e.g., RecoveryPassword, Tpm). |
| mount_point | The volume’s drive letter (e.g., C:), or its volume GUID path if it has no drive letter. |
| protection_status | Whether BitLocker protection is On or Off for the volume. |
| recovery_keys | The Key ID for each of the volume’s recovery passwords, as shown on the BitLocker recovery screen (e.g., E73912F6). The recovery password itself is only visible to users with the “Assets - View BitLocker Recovery Key” permission, and every reveal is logged on the asset’s activity feed. |
| build | The build number of the current OS install (e.g., 19045.4170). |
| Computer manufacturer | The asset's manufacturer (e.g., Dell, Eluktronics, etc.). |
| computer_uuid | The UUID used to identify the asset in Syncro's internal database. |
| created_at | The date the asset first had the Syncro agent installed. |
| customer_id | The ID of the Customer as it appears in the URL for the Customer's Details Page. |
| cpu manufacturer | The name of the asset's CPU manufacturer (e.g. GenuineIntel). |
| cpu name | The name of the asset's CPU (e.g. 11th Gen Intel(R) Core(TM) i5-1135G7). |
| device_name | The name of the asset. |
| domain | The domain the asset is connected to. (Is blank if none.) |
| fixed_disks_total size_gb | The total size for all local drives available. |
| form_factor | The asset's form factor (e.g., desktop, laptop, etc.). |
| free_gb | The amount of free space available on all local drives. |
| free_percent | The amount of free space available on all local drives, as a percentage. |
| hdd manufacturer | The manufacturer of the local storage device. |
| hdd size | The asset's total disk space. |
| id | The asset ID as it appears in the URL on the Syncro account. |
| ip | The IPv4 address of the asset. |
| last_boot_time | The last time the asset had a "full shutdown and boot." Note: Most systems go into hibernation mode when “shutdown.” Only a true shutdown such as from restarting, forcefully shutting the system down, or specific patches that require a reboot will update this time. |
| last_user | The username/name of the last logged-in user. |
| live_agent_version | The latest installed version of the Syncro Live agent. |
| local_administrators | Contains all the information below for each member of the asset’s local Administrators group: |
| account_name | The account name, formatted as {Domain}\{Name} (e.g., DESKTOP-A1\jsmith). Is blank if the agent couldn’t resolve the SID to a name. These accounts show as “Unresolved” on the asset’s System Info tab. |
| source | Where the account comes from (Local, Active Directory, Azure AD, Microsoft Account, or Unknown). |
| type | The account type (User, Group, or Computer). Is blank if unknown. |
| uid | The account’s security identifier (SID) (e.g., S-1-5-21-1004336348-1177238915-682003330-1001). |
| mac address | The MAC address of the asset. |
| mav | Boolean value indicating whether a managed antivirus is enabled on the asset in Syncro. |
| missing_windows_updates | The count of missing Windows updates for the asset, excluding driver updates. |
| model System | The model number (e.g., MAG 15 1660Ti). |
| motherboard manufacturer | The name of the motherboard manufacturer (e.g. Dell Inc.). |
| motherboard name | The name of the motherboard as it appears in the asset's OS (e.g. Base Board). |
| name | A user-provided descriptive name for the asset. |
| Network adapter | Contains all the information below for each connected adapter: |
| autoconfiguration_enabled | A Boolean value indicating whether autoconfiguration is enabled for the network adapter. |
| dhcp_enabled | A Boolean value indicating whether DCHP is enabled on the network adapter. |
| dhcp_server | The local DHCP server address of the network adapter. |
| lease_expires | The date and time of the network adapter's expiration. |
| lease_obtained | The date and time the network adapter's lease was obtained. |
| network_adapters description | A description of the network adapter (e.g., Intel(R) Wi-Fi 6 AX200 160MHz). |
| network_adapters dns1 | The network adapter's DNS1 IP address. |
| network_adapters dns2 | The network adapter's DNS2 IP address. |
| network_adapters gateway | The network adapter's gateway. |
| network_adapters ipv4 | The local IPv4 address of the network adapter. |
| network_adapters ipv6 | The local IPv6 address of the network adapter. |
| network_adapters name | The name of the network adapter. |
| network_adapters subnet | The local subnet of the network adapter. |
| network_adapters type | The type of network adapter (e.g., Wifi, ethernet, etc.). |
| physical_address | The physical address of the network adapter. |
| os_architecture | The asset's architecture (e.g., 64-bit or 32-bit). |
| os_install_dates | The installation date of the asset's OS. |
| os name | The full operating system (OS) version name (e.g., Microsoft Windows 10 Pro). |
| power_plan | The name of the active Windows power plan, stored as a string (e.g., Balanced). |
| pending_reboot | True or false, depending on whether the asset is pending a reboot. |
| primary_adapter | Contains all the information below for the asset's primary adapter: |
| primary_adapter gateway | The gateway address of the asset's primary adapter. |
| primary_adapter ipv4 | The IPv4 address of the asset's primary adapter. |
| primary_adapter ipv6 | The IPv6 address of the asset's primary adapter. |
| primary_adapter dns1 | The DNS1 address of the asset's primary adapter. |
| primary_adapter dns2 | The DNS2 address of the asset's primary adapter. |
| subnet name | The subnet name of the asset's primary adapter. |
| subnet type | The subnet type of the asset's primary adapter (e.g. Ethernet). |
| subnet description | The subnet description of the asset's primary adapter (e.g. Microsoft Hyper-V Network Adapter). |
| primary av name | The name of the primary antivirus (AV) on the asset, if AV is active. |
| ram | Contains all the information below for the asset's RAM: |
| ram description | Manufacturer and type combined, formatted as {Manufacturer}, {Type} (e.g., Samsung, DDR4). |
| ram_gb | The total available RAM on the asset, in GBs. |
| ram manufacturer | The asset's RAM manufacturer. |
| ram size | The asset's total amount of RAM. |
| ram type | The readable label for the memory type code (e.g., DDR4). |
| ram type_smbios | The raw memory type code reported by the system's SMBIOS data. |
| serial_number | The asset's serial number (e.g., MEKSJ125251AB). |
| system_partition free_gb | The amount of free space available for partitioning the asset. |
| system_partition free_percent | The amount of free space available for partitioning the asset, as a percentage. |
| system_partition size_gb | The total size available for partitioning the asset. |
| system_volume_dates | The installation date of the asset's drive. |
| updated_at | The last sync time for the asset. |
| video_card name | A list of the asset's video card names (e.g., Intel, UHD Graphics 630, etc.). |
| windows_license_status | The raw license status code returned by Windows. |
| windows_license_status_label | The readable label for that code (e.g., Activated, Not Activated). |
| windows_release_version | The asset's major release/feature version (e.g., 22H2). (Only applicable if the asset has Windows as the installed OS.) |