Skip to main content

LevelBlue Acquires Fortra’s Alert Logic MDR Business, Strengthening Position as Global MDR Leader. Learn More

LevelBlue Acquires Fortra’s Alert Logic MDR Business, Strengthening Position as Global MDR Leader. Learn More

Services
Cyber Advisory
Managed Cloud Security
Data Security
Managed Detection & Response
Email Security
Managed Network Infrastructure Security
Exposure Management
Security Operations Platforms
Incident Readiness & Response
SpiderLabs Threat Intelligence
Solutions
BY TOPIC
Offensive Security
Solutions to maximize your security ROI
Operational Technology
End-to-end OT security
Microsoft
Unlock the full power of Microsoft Security
Securing the IoT Landscape
Test, monitor and secure network objects
Why LevelBlue
About Us
Awards and Accolades
LevelBlue SpiderLabs
PGA of America Partnership
Secure What's Next
LevelBlue Security Operations Platforms
Security Colony
Partners
Microsoft
Unlock the full power of Microsoft Security
Technology Alliance Partners
Key alliances who align and support our ecosystem of security offerings
Loading...
Loading...

INFO: What is Beacon?

Expand / Collapse


The Beacon module is automatically provisioned and installed with every agent. It keeps the TrustKeeper portal informed of basic information required by other modules and gives the portal a way to know if an agent is still active.

Beacon pings the TrustKeeper portal to simulate a heartbeat for its host agent at a regular interval, by default every fifteen minutes. With each contact, Beacon sends its host’s IP address. Beacon’s ping for Windows and Linux are identical except that on Linux, Beacon includes a message version and beacon version.

Once a day, Beacon sends an expanded report to the TrustKeeper, generally just after midnight if the host is on.  If the host is turned off or the agent’s service is stopped, Beacon will send its full report after the host or the service next starts up. This report contains:

  • Host name
  • Local time
  • Whether that operating system is Windows or Linux
  • Full version of the operating system that the agent is installed on
  • List of adapters including the IP and MAC addresses of the host
  • What version its agent is
  • Installed agent components. For some it includes:
    • A hash of the last successful report of each component
    • Start times of the component's most recent successful run

The Last communication field in the portal’s My Agents refers to the last time that Beacon sent its full report.


To contact LevelBlue about this article or to request support:


Rate this Article:
     

Add Your Comments


Comment submission is disabled for anonymous users.
Please send feedback to Trustwave Technical Support or the Webmaster
.