Tracking the status of stolen devices
NOTE Depending on the Absolute product licenses associated with your account, theft reports may not be available.
On the Reported Stolen page in Devices, you can monitor the status of newly submitted theft reports. You can also review past reports that are now closed.
The Absolute Investigations team updates the status of the report as the investigation progresses. Each time the report status changes, an email notification is sent to all email addresses specified in the theft report. There are five possible stages of an investigation, but not every investigation will pass through all stages (statuses):
For more information about the possible statuses within each stage and what each status means, see status definitions.
To open the Reported Stolen page:
- Log in to the Secure Endpoint Console as a user with View permissions for Investigations.
- On the navigation bar, click Devices.
- On the Devices sidebar, click Reported Stolen.
By default, there are no filters applied to the Reported Stolen page. However, you can create a customized version of the page by adding filters based on one or more filter criteria. For example, you can filter the page to show only those devices with a Report status of Awaiting Customer.
Column | Details |
---|---|
Device name |
The device name The name assigned to the device in the operating system. For Chromebooks, device name is not applicable and therefore shows as "Chrome" in the Secure Endpoint Console. and serial number The identification number assigned to the device by the device manufacturer. For Windows devices, this value may correspond to the serial number of the BIOS, the motherboard, or the chassis, depending on the manufacturer. of the device for which the report was submitted Click the device name to view the device's Device Details page. |
Agent status The operating condition of a device's Secure Endpoint Agent. Possible values are Active (indicates that the device's agent has connected to the Absolute Monitoring Center), Inactive (indicates one of the following: the device was moved to another account; the device was unenrolled, but it is now set to be reactivated; or the device had Persistence enabled at the factory, but it has not yet called in to the Absolute Monitoring Center), and Disabled (indicates that the agent is either flagged for removal or removed from the unenrolled device). Inactive and Disabled devices do not consume a license. |
The operating condition of the device's Secure Endpoint Agent. NOTE If a device's agent status changes, it may take up to a hour for the new status to be reflected on the Reported Stolen page. |
Report ID |
The identifier assigned to the theft report Click the identifier to view the report details or to upload the associated police report. |
Report status |
The status of the investigation Possible values are:
To view more detailed information about each status, add the Reason column to the report. |
Reported date | The date and time when the theft report was submitted |
Incident date | The date and time when the incident occurred |
Recovered date | The date and time when the stolen device was recovered |
Guarantee status |
Indication of whether the device is eligible for a Service Guarantee payout Possible values are:
|
Investigator |
The name and email address of the Investigations team member assigned to the investigation A value of Pending indicates that an investigator is not yet assigned to the investigation. |
Police File Uploaded | The name of the police report file, if the police report has been uploaded |
To find a device's theft report, you can search by device name. You can also add additional columns to the report, such as the Last connected and Closed Date columns. To refresh the page's data, click in the page footer.
By default, the data is sorted by the Reported date column, in descending order. You can change the sort order by clicking a column heading.
You can perform the following tasks on Reported Stolen page:
- Adjust the columns in the results grid
- Add or remove filters
- Export the device list
- Email the device list on a set schedule
- Save changes to filters and columns to create a custom view or a report