Reference: Reveal sensors and packages

Use the Index sensors to get details about Reveal functionality on endpoints.

Sensor Description
Reveal - Index Has Category Hit Returns Yes/No for endpoints with files matching a category.
Reveal - Index Has No Validation Rule Hit Returns Yes/No for endpoints with files matching a rule with no validation.
Reveal - Index Has Rule Hit Returns Yes/No for endpoints with files matching a rule.
Reveal - Index Has Valid Rule Hit Returns Yes/No for endpoints with files matching a rule.
Reveal - Index Installed Rules Returns Rule IDs installed on the endpoint.
Reveal - Index List Discovered Volumes Returns list of filesystem volumes discovered by index.
Reveal - Index No Validation Rule Hit Files Returns files that match rules with a no validation.
Reveal - Index Quick Search Search for a hashed token on an endpoint.
Reveal - Index Rule Hit Summary Returns a summary of rule hits.
Reveal - Index Valid Rule Hit Files Returns files that match rules with a valid validation.
Reveal - Index File Count Returns count of index files that match one or more supplied inputs.
Reveal - Index File Details Returns details of index files that match one or more supplied inputs.
Reveal - Index File Exists Returns Yes or No, using Index to determine whether the specified file exists based on the supplied input.
Reveal - Index File Hash Recently Changed Returns details of index files that match one or more supplied inputs.

The following packages are provided with Reveal. Open a package in the console to edit package parameters and deploy the package to appropriate endpoints.

Package Description
Index - Request Immediate One-Time Scan This package starts an index of a targeted endpoint.

The following Reveal sensors have been deprecated:

  • Reveal - Background Scan Results

  • Reveal - Background Scan Summary

  • Reveal - Confirmed Files

  • Reveal - Coverage Status

  • Reveal - Endpoint Rule Result

  • Reveal - Endpoints with Confirmed Sensitive Data

  • Reveal - Endpoints with Unconfirmed Sensitive Data

  • Reveal - File Details

  • Reveal - Installed Rule Sets

  • Reveal - Installed Rule Sets by Name

  • Reveal - Label Results

  • Reveal - Status

  • Reveal - Validation Results

  • Reveal - Tools Version

The following packages have been deprecated:

  • Reveal - Delete Indexing Data [Linux]

  • Reveal - Delete Indexing Data [Mac]

  • Reveal - Delete Indexing Data [Windows]

  • Reveal - Index Path [Linux]

  • Reveal - Index Path [Mac]

  • Reveal - Index Path [Windows]

  • Reveal - Rebuild Indexing Data [Linux]

  • Reveal - Rebuild Indexing Data [Mac]

  • Reveal - Rebuild Indexing Data [Windows]

  • Reveal - Set Time Offset [Linux]

  • Reveal - Set Time Offset [Mac]

  • Reveal - Set Time Offset [Windows]

  • Reveal - Start Indexing [Linux]

  • Reveal - Start Indexing [Mac]

  • Reveal - Start Indexing [Windows]

Sensor replacements from Reveal 1.x to Reveal 2.x

Reveal 1.x Reveal 2.x
Reveal - Background Scan Results Reveal - Index Rule Hit Summary
Reveal - Background Scan Summary Reveal - Index Rule Hit Summary
Reveal - Confirmed Files Reveal - Index Valid Rule Hit Files
Reveal - Coverage Status Client Extensions - Status
Endpoint Configuration - Tools Status
Reveal - Endpoint Rule Result --
Reveal - Endpoints with Confirmed Sensitive Data Reveal - Index Has Valid Rule Hit
Reveal - Endpoints with Unconfirmed Sensitive Data Reveal - Index Has No Validation Rule Hit
Reveal - File Details --
Reveal - Installed Rule Sets Reveal - Index Installed Rules
Reveal - Installed Rule Sets by Name Reveal - Index Installed Rules
Reveal - Label Results --
Reveal - Status Client Extensions - Status
Reveal - Validation Results --
Reveal - Tools Version Endpoint Configuration - Tools Status
-- Reveal - Index Has Category Hit
-- Reveal - Index Has Rule Hit
-- Reveal - Index Quick Search
-- Reveal - Index No Validation Rule Hit Files