<h2>Unified Audit</h2>
<p>The ThreatLocker Unified Audit is a central location where all audited information is displayed. By default, the Unified Audit retains data for <strong>31 days</strong>, which is accessible via the Unified Audit page within the ThreatLocker portal. After <strong>31 days</strong>, the information is permanently deleted and cannot be recovered.</p>
<blockquote>
<p><strong>Note:</strong> You can extend your Unified Audit retention period for an additional fee. Please contact your Account Manager for more details on pricing for this service.</p>
</blockquote>
<h2>&nbsp;</h2>
<h2>System Audit</h2>
<p>The ThreatLocker System Audit is where the activity in your ThreatLocker organization is logged. Our System Audit will retain data <strong>from the day your organization was created in ThreatLocker</strong>.&nbsp;</p>
<p>For more information on our System Audit page, please visit our <a rel="noopener noreferrer" href="https://threatlocker.kb.help/system-audit-page/" target="_blank">System Audit Page KB</a>.</p>

UNIFIED AUDIT

The ThreatLocker Unified Audit is a central location where all audited information is displayed. By default, the Unified Audit retains data for 31 days, which is accessible via the Unified Audit page within the ThreatLocker portal. After 31 days, the information is permanently deleted and cannot be recovered.

> Note: You can extend your Unified Audit retention period for an additional fee. Please contact your Account Manager for more details on pricing for this service.


 


SYSTEM AUDIT

The ThreatLocker System Audit is where the activity in your ThreatLocker organization is logged. Our System Audit will retain data from the day your organization was created in ThreatLocker. 

For more information on our System Audit page, please visit our .

Log Retention

Preventing the Exploitation of 3CX 

Preventing the Exploitation of CVE-2023-23397

Microsoft Peer-to-Peer Updates

ThreatLocker Endpoint Security Quality Guarantee

Eaglesoft and ThreatLocker Computers Not Checking In

Preventing the Exploitation of CVE-2022-30190 (Follina)

Applying Policies to Users or Active Directory Groups

Blocking and Permitting USB Drives

Computer failing to update

Create a Computer Group that does not learn

Creating a New Administrator

Default Computer Group Policies

Deploying Policies

Diagnosing an Application with an issue

Email Parsing Rules in ConnectWise Manage

Excluded Processes

Getting your Unique Identifier from ThreatLocker

Hermetic Wiper: ThreatLocker Recommended Policy

Log4J Vulnerability

Managing Application Definitions

Managing Application Policies

Merging Application Definitions

Notifications for Requests

Permitting All Signed Files in a Directory

Permitting Blocked Files

Permitting Software from the Approval Center

Permitting Software From the Computers Page

Preventing BCDEdit From Being Weaponized

Preventing Bitlocker from being Weaponized

Response to Reports of Webroot Compromised File

Restarting the ThreatLocker Agent

Setting the ThreatLocker Agent Update Channel 

Setting Up SMS Alerts for ThreatLocker Requests

Setting up the Active Directory Sync Service

ThreatLocker Application Control Agent Data Collection

ThreatLocker Override Codes

ThreatLocker Popup is not happening when something is blocked

ThreatLocker Portal Performance 

ThreatLocker Stub Installer

Trusting an Application by a Certificate

Uninstalling the ThreatLocker Agent

Uninstalling the ThreatLocker Agent on Windows XP 

Updating the ThreatLocker Version on a Single Computer

Updating ThreatLocker to the Latest Version

User Permissions 

Using Learning Mode to Track Installed Files from an RMM or Software Deployment Tool

Using the Console App to Verify the ThreatLocker MAC Agent is Running

Using the ThreatLocker Unified Audit

Using ThreatLocker to Mitigate CVE-2021-40444

Why is an application that matches a built-in application being blocked?

Windows 11 Upgrade and ThreatLocker 

ThreatLocker Security and Privacy

Trial Expiry

The ThreatLocker Testing Environment

Allowing ThreatLockerService to Retrieve your AD Groups

Customer Deal Registration

ThreatLocker Mitigation and GoAnywhereMFT Zero-Day Exploit

Preventing the Exploitation of CVE-2023-2033

Rubber Ducky Data Exfiltration | Google Bucket

Preventing the Exploitation of MOVEit Vulnerability (CVE-2023-34362)

Changes to Elevation in ThreatLocker Version 8.2

Browser Extensions Affecting the ThreatLocker Testing Environment

Retrieving Your Computer ID

ThreatLocker Agent Tray

Protecting Fileservers While Allowing Remote Machines to Access Shared Files



Browser Extensions Affecting ThreatLocker Portal Performance

How to Use .NET Regex Within ThreatLocker

SSL Inspection

ThreatLocker Health Center and Health Report

Portal 2.0.1 Maintenance Mode Permission Changes

Guide to the TLProxyTester Application

Configuring Defender Virus & Protection Settings using Configuration Manager

Controlling Access to M365 Resources Using Conditional Access and Named Locations