Data collection
The Oneleet Agent collects data from your device for continuous monitoring and security. The data collected includes:
System information
Section titled “System information”- Computer name
- CPU brand
- Hardware model
- Hardware serial
OS information
Section titled “OS information”- OS name
- OS version
- OS architecture
- Local user accounts and permissions, including which accounts are able to unlock FileVault
- Active and enabled network filters
Firewall status
Section titled “Firewall status”Firewall is a network security system that monitors and controls incoming and outgoing network traffic. We check the status of the firewall and installed network filters to ensure that a firewall is enabled.
Gatekeeper status
Section titled “Gatekeeper status”Gatekeeper is a security feature in macOS that helps protect your Mac from malicious software. We check the status of Gatekeeper to ensure that it is enabled.
FileVault status
Section titled “FileVault status”FileVault is a disk encryption program in macOS that helps protect your data. We check the status of FileVault for your main disk drive to ensure that it is enabled.
Screenlock status
Section titled “Screenlock status”Screenlock is a security feature that requires a password to unlock your device. We check the status of screenlock to ensure that it is enabled and set to a minimum threshold.
Storage information
Section titled “Storage information”The storage volumes mounted on your device, including the device name, mount point, total capacity, and available free space.
System information
Section titled “System information”- Computer name
- CPU brand
- Hardware model
- Hardware serial
OS information
Section titled “OS information”- OS name
- OS version
- OS architecture
- Local user accounts and permissions
Firewall status
Section titled “Firewall status”Firewall is a network security system that monitors and controls incoming and outgoing network traffic. We check the status of the firewall to ensure that it is enabled.
BitLocker status
Section titled “BitLocker status”BitLocker is a disk encryption program in Windows that helps protect your data. We check the status of BitLocker for your main disk drive to ensure that it is enabled.
Screenlock status
Section titled “Screenlock status”Screenlock is a security feature that requires a password to unlock your device. We check the status of screenlock to ensure that it is enabled and set to a minimum threshold.
Storage information
Section titled “Storage information”The logical drives on your device (such as C:), including the drive name, total capacity, and available free space.
System information
Section titled “System information”- Computer name
- CPU brand
- Hardware model
- Hardware serial
OS information
Section titled “OS information”- OS name
- OS version
- OS architecture
- Local user accounts and permissions
Firewall status
Section titled “Firewall status”Firewall is a network security system that monitors and controls incoming and outgoing network traffic. We check supported Linux firewall managers and rulesets, including UFW, firewalld, nftables, and iptables, to determine whether a firewall is enabled.
Disk encryption status
Section titled “Disk encryption status”Disk encryption is a security feature that helps protect your data. We check the status of disk encryption for your main disk drive to ensure that it is enabled.
Storage information
Section titled “Storage information”The storage volumes mounted on your device, including the device name, mount point, total capacity, and available free space.
Additional data on MDM-managed devices
Section titled “Additional data on MDM-managed devices”Devices in organizations using Oneleet MDM report additional device inventory data on top of the data listed above:
Battery health (macOS and Windows)
Section titled “Battery health (macOS and Windows)”The battery’s factory design capacity and current maximum charge capacity, along with a computed battery health percentage. This helps track battery degradation across managed hardware.
iCloud accounts (macOS)
Section titled “iCloud accounts (macOS)”The iCloud accounts configured for each local user account, including the iCloud account ID (the email address used to sign in) and whether the account is currently signed in. This helps verify that managed devices are only associated with approved iCloud accounts.
System Integrity Protection status (macOS)
Section titled “System Integrity Protection status (macOS)”System Integrity Protection (SIP) is a macOS security feature that protects system files and processes from modification. We check the status of SIP to ensure that it is enabled.