Installing the
Windows Server
Sensor

The

Windows Server

Sensor (agent) runs as a

Windows

service in a compatible

Windows Server

system. It observes events within the

Windows Server

system and sends data records to

CylanceMDR

. The sensor captures the following events:

Hardware

Security

System

Windows Firewall

Windows Defender

PowerShell

File Integrity Monitoring

The

Windows Server

Sensor provides the following key capabilities:

If the sensor is installed on the same network as the domain controller,

CylanceMDR

enriches data with the relationship between users and IP addresses.

If the sensor is installed on the same network as the DHCP server,

CylanceMDR

enriches data with the relationship between hostnames and IP addresses, so assets can be tracked even when the IP address changes.