VERISCO Alertio Investigate
Endpoints
Every machine reporting to Alertio, its health, and everything known about it, from vulnerabilities to recent file changes. Response actions start here too.
Open Endpoints in the Investigate group.
The fleet at a glance#
Three panels sit above the list: Agent health (healthy, degraded, offline and never connected), a Fleet status grid with one cell per agent, and OS and agent version, which flags agents running behind the current build.
The chips above the table filter the list directly:
| Chip | Shows |
|---|---|
| All agents | The whole fleet. |
| Offline | Agents that have stopped reporting. |
| Never connected | Agents enrolled but never seen. |
| Stale > 1h | Agents whose last check-in is more than an hour old. |
| Version drift | Agents behind the current agent version. |
The table lists hostname, address, operating system, agent version, last seen and alerts in the past 24 hours, with a trend line. Sort by any column.
Map view#
Switch from Table to Map to see the same fleet grouped by subnet, agent group or operating system. The icon shows the operating system, the ring shows connection status, and a dot marks alert activity in the past 24 hours. Only real groupings are drawn; Alertio does not invent network links it cannot see.
The endpoint panel#
Select an endpoint to open its panel.
| Tab | Contains |
|---|---|
| Overview | Identity, operating system, group, addresses and connection state. |
| Vulnerabilities | Known CVEs affecting installed packages, with severity and advisory links. |
| Configuration | Security configuration assessment: checks scored pass, fail or not applicable. |
| FIM | Recent file changes on this machine. See File integrity. |
| Alerts | Recent alerts from this machine. |
| Response | Run a response action against this machine. |
On the Response tab, choose a capability and supply its target. A preview states the action, the target and the risk before anything happens; destructive actions are marked. Execute now runs it, Cancel abandons it.
Full endpoint report#
Open full report, from the Vulnerabilities or Configuration tab, opens a dedicated screen for the machine.
| View | Lets you |
|---|---|
| Vulnerabilities | Filter by severity, by whether a fix is available, by package or by CVE; group by package; open a CVE for its description, affected and fixed versions, and references. |
| Configuration assessment | See the overall hardening score and the benchmark policies applied, then open a policy to read each check: what was tested, what was expected and what was found. |
Rescan now requests a fresh scan of the machine.
Adding endpoints#
Deploy agent, at the top of the screen, opens the enrolment flow. See Deploy agents.
Something missing or wrong on this page? Tell us and we will fix it.