DataExplorer Library
The Custom Data policy includes the DataExplorerâ„¢ Library, which is a set of predefined data points. These data points are disabled by default and you can enable them on the Custom Data page. The following table describes the Default data points:
Name | Applies to: | Descriptions |
---|---|---|
Chrome extensions | Windows devices with Chrome installed |
Returns a comma separated list of Chrome extensions with their version Can be used to audit browser extensions installed on devices NOTE The response is limited to 4,000 characters |
DNS servers |
Windows devices |
Returns a comma separated list of the DNS servers by IP address in search priority order Can be used to make sure devices are using approved DNS servers or to diagnose DNS issues |
Firewall status | Windows devices |
Returns Enabled if the Windows Defender firewall is active on the device Returns Disabled if the Windows Defender firewall is inactive on the device Can be used to make sure devices are actively protected by the local firewall |
OU - organizational unit | Windows devices with organizational units (OUs) stored in the registry |
Returns a comma separated list of the Active Directory or LDAP OUs the device belongs to Can be used to view the OUs a device is assigned to |
Wi-Fi authentication protocol | Windows devices with Wi-Fi |
Returns the authentication protocol used by the device Can be used to make sure devices are connecting using secure Wi-Fi authentication protocols |