Data points collected by activated policies
Absolute policies control the collection of hardware, software, usage, and system information from your devices. The Hardware policy is always activated by default, but you need to activate other policies if you want to monitor additional device information in the Absolute console. To learn about the specific data points that are collected when a particular policy is activated, refer to the appropriate section in this topic.
How frequently is device data collected?
NOTE Depending on the Absolute licenses associated with your account, some data points may not be available.

Symbol / Value |
Meaning |
---|---|
P |
The Absolute agent collects the data point on the indicated platform and shows it in the Absolute console. |
n/a |
The data point does not apply to the indicated platform. |
GAC |
The data point is synced directly from the Google Admin console and shows in the Absolute console. Applies to Chromebooks only. |
† |
The Absolute agent collects the data point on the indicated platform but the data point is not shown in the Absolute console. |
O |
The Absolute agent does not detect the data point on the indicated platform because the platform does not make the data available, or because there is no requirement to collect this data. |

For any enrolled device, the Absolute agent and its Hardware Data Processing (HDP) component collect the following data points:
Data point |
Device platform |
|||
---|---|---|---|---|
Windows |
Mac |
Android |
Chromebook |
|
Agent specific data points |
||||
P |
P |
P |
P |
|
P |
P |
P |
P |
|
P |
P |
P |
P |
|
P |
P |
† |
† |
|
P |
P |
† |
† |
|
P |
P |
O |
O |
|
P |
n/a |
† |
n/a |
|
Firmware Persistence status The status of the Absolute Persistence module, which is embedded in the firmware of a Windows device by the device manufacturer. The module is responsible for monitoring the health of the Absolute agent and restoring it if it's missing, damaged, or tampered with. Possible statuses are: Active, Awaiting Call, Inactive, Not Supported, Pending, and Pending Removal. |
P |
n/a | n/a | n/a |
Firmware Persistence version The version number of the Absolute Persistence module, which is embedded in the firmware of a Windows device by the device manufacturer. The module is responsible for monitoring the health of the Absolute agent and restoring it if it's missing, damaged, or tampered with. Possible values are 1.0 or 2.0. |
P |
n/a | n/a | n/a |
Activation date A field and report column that shows the date and time that the device completed its first check-in to the Absolute Monitoring Center and the device's Absolute agent was activated. |
P |
P |
P |
P |
Device data points |
||||
P |
P |
P |
O |
|
P |
P |
n/a |
P |
|
Domain The name of the device's Windows domain, if applicable. |
P |
P |
n/a |
n/a |
P |
P |
n/a |
n/a |
|
Full system name (called System name on Mac) |
P |
P |
n/a |
n/a |
Operating System |
||||
P |
P |
P |
P |
|
Version The number that identifies the version of the operating system, which was detected by the Absolute agent. (for some Mac devices, Edition holds this information) |
P |
P |
P |
GAC |
Edition |
n/a |
P |
n/a |
n/a |
Build |
P |
P |
n/a |
n/a |
CSDVersion / OS Service Pack |
P |
n/a |
n/a |
n/a |
Architecture |
P |
n/a |
n/a |
P |
Installation date |
P |
P |
n/a |
n/a |
Last boot time |
P |
P |
n/a |
n/a |
Update build revision |
P |
n/a |
n/a |
n/a |
Current build |
P |
n/a |
n/a |
n/a |
Release ID |
P |
n/a |
n/a |
n/a |
Edition ID |
P |
n/a |
n/a |
n/a |
Manufacturer |
P |
n/a |
n/a |
n/a |
Product key |
P |
O |
n/a |
n/a |
Serial number |
P |
P |
n/a |
n/a |
Windows directory |
P |
n/a |
n/a |
n/a |
Other OS description |
P |
n/a |
n/a |
n/a |
System Information |
||||
P |
P |
n/a |
n/a |
|
P |
P |
P |
P |
|
Available physical memory (bytes) |
P |
P |
P |
P |
Total virtual memory (bytes) |
P |
P |
n/a |
n/a |
Available Virtual Memory (bytes) |
P |
P |
n/a |
n/a |
P |
P |
P |
P |
|
P |
P |
P |
P |
|
Processor |
P |
O |
P |
O |
Page file space (bytes) |
P |
n/a |
n/a |
n/a |
Page file |
P |
n/a |
n/a |
n/a |
Boot device |
P |
P |
n/a |
n/a |
Locale |
P |
P |
n/a |
P |
Name |
P |
P |
n/a |
P |
System directory |
P |
P |
n/a |
n/a |
P |
P |
P |
GAC |
|
Model The manufacturer's designated name for the type of device. |
P |
P |
P |
GAC |
System type |
P |
P |
n/a |
n/a |
P |
P |
P |
GAC |
|
Time zone |
P |
P |
n/a |
n/a |
System integrity protection status |
n/a |
P |
n/a |
n/a |
BIOS |
||||
Release date |
P |
n/a |
n/a |
n/a |
Language |
P |
n/a |
||
Serial number |
P |
n/a |
||
Version |
P |
GAC |
||
SMBIOS version |
P |
n/a |
||
SMBIOS major version |
P |
n/a |
||
SMBIOS minor version |
P |
n/a |
||
Manufacturer |
P |
n/a |
||
Version date |
P |
n/a |
||
Asset tag |
P |
n/a |
||
Supervisor Password Status |
P Supported models only |
n/a |
||
Battery |
||||
ID |
P |
P |
O |
O |
Name |
P |
P |
||
Serial number |
P |
P |
||
Capacity |
P |
P |
||
Estimated charge remaining |
P |
P |
||
Estimated runtime |
P |
O |
||
Expected life |
O |
|||
Max recharge time |
||||
Memory |
||||
NOTE The Absolute agent cannot collect memory information for MacBook Pro devices with an Apple M1 chip. |
||||
ID |
P |
n/a |
P |
|
Part number |
n/a |
P |
n/a |
|
Manufacturer |
P |
P |
n/a |
|
Serial number |
P |
P |
n/a |
|
Size (bytes) |
P |
P |
P |
|
Slot |
P |
P |
n/a |
|
Speed |
P |
P |
n/a |
|
Type (or Type Detail) |
P |
P |
n/a |
|
Status |
n/a |
P |
n/a |
|
Chassis Type |
P |
n/a |
n/a |
|
CPU |
||||
ID |
P |
P |
P |
P |
Name |
P |
P |
P |
P |
Architecture |
P |
P |
n/a |
P |
Bus speed |
O |
P |
n/a |
n/a |
Data width |
P |
O |
n/a |
n/a |
Instruction set |
O |
P |
n/a |
n/a |
Logical cores |
P |
P |
n/a |
n/a |
Physical cores |
P |
P |
n/a |
n/a |
Processor speed The rate at which the computer processor computes, measured in megaHertz. |
P |
O |
P |
n/a |
Processor number |
O |
O |
n/a |
P |
L2 cache size |
P |
P |
n/a |
n/a |
L2 cache speed |
P |
O |
n/a |
n/a |
L3 cache size |
P |
P |
n/a |
n/a |
L3 cache speed |
P |
O |
n/a |
n/a |
CD ROM |
||||
ID |
P |
n/a |
n/a |
n/a |
Name |
P |
|||
Drive |
P |
|||
Manufacturer |
P |
|||
Media loaded |
P |
|||
Media Type |
P |
|||
Description |
P |
|||
Status |
P |
|||
Transfer rate |
P |
|||
PnP device ID |
P |
|||
SCSI target ID |
P |
|||
Sound Device |
||||
The following data points are collected for each detected sound device: |
||||
ID |
P |
n/a |
O |
O |
Name (for Mac devices, this field also shows the ID) |
P |
P |
||
Manufacturer |
P |
P |
||
Camera |
||||
The following data points are collected for each detected camera: |
||||
ID |
P |
P |
P |
O |
Name |
P |
P |
n/a |
|
Description |
P |
n/a |
P |
|
Model |
O |
P |
n/a |
|
Is Enabled |
P |
P |
P |
|
Display |
||||
The following data points are collected for each detected display: |
||||
ID |
P |
n/a |
n/a |
n/a |
Name |
P |
n/a |
n/a |
P |
PnP device ID |
P |
n/a |
n/a |
n/a |
Adapter type |
P |
n/a |
n/a |
n/a |
Adapter description |
P |
P |
n/a |
n/a |
Manufacturer |
P |
P |
n/a |
n/a |
Adapter RAM |
P |
n/a |
n/a |
n/a |
Driver version |
P |
n/a |
n/a |
n/a |
Number of colors |
P |
n/a |
n/a |
n/a |
Resolution |
P |
n/a |
P |
P |
Bits per pixel |
P |
n/a |
n/a |
n/a |
Depth |
n/a |
P |
n/a |
n/a |
Height |
P |
P |
n/a |
P |
Width |
P |
P |
n/a |
P |
Refresh rate |
n/a |
P |
n/a |
n/a |
Horizontal resolution |
† |
n/a |
† |
n/a |
Vertical resolution |
† |
n/a |
† |
n/a |
Input | ||||
Keyboards |
||||
The following data points are collected for each detected keyboard: |
||||
ID |
P |
n/a |
n/a |
O |
Name |
P |
P |
||
Description |
P |
n/a |
||
Layout |
P |
n/a |
||
PnP device ID |
P |
n/a |
||
Number of function keys |
P |
n/a |
||
Pointing Devices |
||||
The following data points are collected for each detected pointing device: |
||||
ID |
P |
P |
n/a |
O |
Name |
P |
P |
||
Manufacturer |
P |
P |
||
Number of buttons |
P |
n/a |
||
Power management supported |
P |
P |
||
PnP device ID |
P |
n/a |
||
Handedness |
P |
n/a |
||
Hardware type |
P |
n/a |
||
Cellular |
||||
Enabled |
P |
n/a |
P |
n/a |
Current network numeric code |
P |
O |
||
Current network numeric code |
P |
O |
||
Mobile network - Current |
O |
P |
||
Mobile Network - Home |
O |
P |
||
P |
P |
|||
P |
P |
|||
Phone number |
P |
P |
||
SIM serial |
P |
O |
||
SIM ICCID (Integrated Circuit Card Identifier) |
P |
P |
||
Type |
P |
P |
||
Mobile Broadband Adapter |
||||
The following data points are collected for each detected adapter: NOTE This information is available only on the device's (Classic) Device Summary page, and the Mobile Broadband Adapter Report in Classic Reports. |
||||
Manufacturer |
P |
n/a |
n/a |
n/a |
Model |
P |
|||
Network |
P |
|||
Service Status |
P |
|||
Detected Phone Number |
P |
|||
Network Adapters |
||||
The following data points are collected for each detected adapter: |
||||
ID |
P |
n/a |
P |
|
Name |
P |
P |
P |
|
Adapter type |
P |
n/a |
n/a |
|
Installed |
P |
n/a |
n/a |
|
IPv4 address |
P |
P |
P |
|
IPv6 address |
P |
P |
n/a |
|
IP subnet |
P |
n/a |
n/a |
|
Default gateway |
P |
n/a |
n/a |
|
DHCP enabled |
P |
n/a |
n/a |
|
DHCP server |
P |
n/a |
n/a |
|
DHCP lease expires |
P |
n/a |
n/a |
|
DHCP lease obtained |
P |
n/a |
n/a |
|
MAC address |
P |
P |
GAC |
|
Manufacturer |
P |
P |
n/a |
|
Product type |
P |
n/a |
n/a |
|
Speed |
P |
P |
n/a |
|
Network SSID |
P |
P |
n/a |
|
Storage - Disk |
||||
The following data points are collected for each detected disk: | ||||
ID |
P |
P |
n/a |
n/a |
Name |
P |
P |
P |
|
Description |
P |
P |
n/a |
|
Disk index |
P |
P |
n/a |
|
Bytes per sector |
P |
n/a |
n/a |
|
Firmware revision |
P |
P |
n/a |
|
Manufacturer |
P |
P |
n/a |
|
Media type |
P |
P |
n/a |
|
Model |
P |
P |
n/a |
|
Number of partitions |
P |
n/a |
n/a |
|
Sectors per track |
P |
n/a |
n/a |
|
Serial number |
P |
P |
n/a |
|
Size (bytes) |
P |
P |
P |
|
Status |
P |
n/a |
n/a |
|
Total cylinders |
P |
n/a |
n/a |
|
Total heads |
P |
n/a |
n/a |
|
Total sectors |
P |
n/a |
n/a |
|
Total tracks |
P |
n/a |
n/a |
|
Total tracks per cylinder |
P |
n/a |
n/a |
|
Storage - Volumes |
||||
The following data points are collected for each detected volume: |
||||
ID |
P |
P |
n/a |
n/a |
Name |
P |
P |
||
Boot |
P |
P |
||
Compressed |
P |
n/a |
||
Drive letter |
P |
n/a |
||
File system |
P |
P |
||
Serial |
P |
P |
||
Size (bytes) |
P |
P |
||
Free space (bytes) |
P |
P |
||
Mount point |
n/a |
P |
||
Printers |
||||
The following data points are collected for each detected printer: |
||||
ID |
P |
P |
n/a |
O |
Name |
P |
P |
||
Driver |
P |
P |
||
Server |
P |
O |
||
Share |
P |
O |
||
Port |
P |
O |
||
USB |
||||
The following data points are collected for each detected USB device: |
||||
Name |
P |
O |
n/a |
O |
Manufacturer |
P |
|||
PnP device ID |
P |
|||
Anti-malware |
||||
The following data points are collected for the anti-malware software detected on the device: |
||||
Product name |
P |
P |
O |
n/a |
Version |
P |
P |
||
Definition |
P |
P |
||
Definition date |
P |
P |
||
Last updated |
P |
P |

In addition to the hardware data points shown for Chromebooks in the Hardware data points section, Absolute collects additional Chromebook data points from the Google Admin console. The following data points are on Chromebooks only:
Chromebook specific data points |
---|
Annotated asset ID |
Annotated location |
Annotated user |
Auto-update expiration |
Boot Mode |
Device ID |
Extension |
Notes |
Organizational unit |
Platform version |
Provisioning status |
Recent Users |

In addition to the hardware data points shown for Android devices in the Hardware data points section, the Absolute agent and its Hardware Data Processing (HDP) component collect the following additional data points on Android devices only:
Security Patch Level |
Detected Serial Number |
Network |
Wi-Fi |
The following data points collected for each detected adapter: |
ID |
Adapter type |
IPV4 Address |
MAC Address |
Speed |
Network SSID |
Bluetooth |
The following data points collected for each detected Bluetooth device: |
Address |
Is Enabled |
Available physical memory |
Total physical memory |
Available space |
The following additional data points show only on the device's Android Vulnerability page:
Data point |
|
---|---|
Lock screen protection |
|
Screen timeout lock |
|
ROM type |
Device encrypted |
Bootloader unlock available |
SD card encrypted |
ADB enabled (ADB = Android Debug Bridge) |
Mac address change |
Unknown sources installation |
IMEI change |
Google app verification level |
IMSI/SIM card change |
Google app verification frequency |
Factory data reset |
Secondary (Non-Google) Google app verification |
EMM client installed |
Anti-Malware app installed |
MTD app installed |
Cloud storage app installed |
|

When an Application Resilience policy is activated on a device, the Absolute agent collects the following data points:
- Last App Resilience scan The date and time the Application Resilience (RAR) component of the Absolute agent last ran a status check on the device.
- Application Resilience
- Events last 30 days
- Failures last 30 days
- Repairs last 30 days
- Reinstalls last 30 days
Depending on the application, it also collects the following data points:
Resilient application |
Data points |
---|---|
BitLocker® |
If you selected BitLocker with Standalone MBAM, Application Resilience repairs and reinstalls MBAM and collects and reports any exceptions. |
Microsoft® SCCM |
|
For all other supported applications except for BitLocker and Microsoft SCCM |
|
NOTE The Application Resilience policy is supported on Windows devices only.

The Absolute agent collects the following data points when the Custom Data policy is activated on a Windows device:
NOTE Custom Data is not supported on Mac
Data point |
|
---|---|
Custom data points |
Provided by Absolute and added to the Custom Data policy by you. These data points are unique to you. |
Automatically included in the Custom Data policy, but must be enabled by you:
|

The Absolute agent collects the following data points when the Device Usage policy is activated on a Windows, Mac, or Chromebook device:
NOTE The Device Usage policy is not supported on Android devices.
Data point |
Platform |
||
---|---|---|---|
Windows |
Mac |
Chromebook |
|
P |
P |
P |
|
P |
P |
P |
|
Event Timestamp (Local Device Time): <n> minutes of activity |
P |
P |
P |
Activity Type (Login or Unlock) |
P |
P |
P |
BSSID |
P |
P |
n/a |
SSID |
P |
P |
n/a |
Local IP (IPv4) |
P |
P |
P |
Public IP (IPv4) |
P |
P |
P |
Active Directory OU |
P |
P |
n/a |

The Absolute agent collects the following data points when the Endpoint Data Discovery (EDD) policy is activated on a Windows or Mac device:
NOTE The EDD policy is not supported on
Data point |
Platform |
|
---|---|---|
Windows |
Mac |
|
Scan Date |
P |
P |
Rule |
P |
P |
Matched token (content string that matched the Rule) |
P |
P |
Lexicon line number that was matched |
P |
P |
File Name |
P |
P |
File Extension |
P |
P |
File Type |
P |
P |
File Path |
P |
P |
File Owner |
P |
P |
File Created |
P |
P |
File Modified |
P |
P |
File Accessed |
P |
O |

The Absolute agent collects the following data points when the Full-Disk Encryption Status policy is activated on a Windows or Mac device:
NOTE The Full-Disk Encryption policy is not supported on
Data point |
Platform |
|
---|---|---|
Windows |
Mac |
|
Encryption > Status |
P |
P |
Encryption > Product Name |
P |
P |
Encryption > Version |
P |
P |
Encryption > Algorithm |
P |
O |
Encryption > Comments |
P |
P |
Encryption > Key Size |
P |
O |
Encryption > SED Capable |
P |
P |
Encryption > Last Updated |
P |
P |
Encryption > All Drives Encrypted |
P |
P |

The Absolute agent collects the following data points when the Geolocation Tracking policy is activated on a device:
Field |
Platform |
|||
---|---|---|---|---|
Windows |
Mac |
Android |
Chromebook |
|
Device Location > City |
P |
P |
P |
P |
Device Location > State/Province |
P |
P |
P |
P |
Device Location > Country |
P |
P |
P |
P |
Device Location > Latitude |
P |
P |
P |
P |
Device Location > Longitude |
P |
P |
P |
P |
Geolocation technology > Type |
P |
P |
P |
P |
Geolocation technology > Accuracy (meters) |
P |
P |
P |
P |
Geolocation Tracking > Last data received |
P |
P |
P |
P |

The Absolute agent collects the following data points when the Installed Applications policy is activated on a Windows or Mac device:
NOTE The Installed Applications policy is not supported on
Data point |
Platform |
|
---|---|---|
Windows |
Mac |
|
Application |
P |
P |
Version |
P |
P |
Publisher |
P |
P |
Installed (date) |
P |
P |
Install location |
P |
P |
Identifier |
P |
P |
OS Name |
P |
P |
Username |
P |
P |

The Absolute agent collects the following data points when the Software policy is activated on a Windows
NOTE The Software policy is not supported on Chromebook devices.
Data point |
Platform |
||
---|---|---|---|
Windows |
Mac |
Android |
|
Publisher |
P |
P |
P |
Suite |
P |
P |
P |
Application Name |
P |
P |
P |
Application Version |
P |
P |
P |
File Name |
P |
P |
P |
File Version |
P |
P |
P |
Detected Date |
P |
P |
P |
File Path |
P |
P |
P |

The Absolute agent collects the following data points when the Web Usage policy is activated on a Windows
NOTE The Web Usage policy is not yet supported on Mac
Field |
Platform |
|
---|---|---|
Windows |
Chromebook |
|
Website |
P |
P |
Webpage title |
P |
P |
Web usage > Daytime |
P |
P |
Web Usage > Evenings and weekends |
P |
P |
Username (of each logged in user) |
P |
P |