ThreatLocker Android App V 2.05 and Lower

Updated September 1, 2022

For all app versions above 2.05, please see ThreatLocker Mobile App | ThreatLocker Help Center (kb.help)

To view known issues, see https://threatlocker.kb.help/threatlocker-mobile-app-known-issues

Login

Input your ThreatLocker Portal username.

Click 'Continue'.

Input your ThreatLocker Portal password.

Select your logout time period.

Click 'Login'.

For SMS or OTC 2-Factor Authentication, you will need to retrieve your code and input it into the One Time Code textbox. Then click 'Submit'.

For DUO, you will need to approve your DUO push and then you will be logged into ThreatLocker Mobile.

Once successfully authenticated, ThreatLocker Mobile will display a list of all the computers you manage, including all computers for child organizations.

Authentication with Yubikey is not currently supported on ThreatLocker Mobile.

About the Computers Page

The top line in each entry is the name of the Organization.

The second line is the name of the computer.

Any active Maintenance Periods will be listed below the name of the computer.

Buttons that have a colorful icon signify an active Maintenance period.

Any buttons with icons in gray signify an inactive Maintenance period.

Search

You can search by computer name or Organization name by inputting all or part of the name into the search bar at the top of the screen and then clicking 'Search'.

Enabling Learning Mode

Please note: Learning and Monitor Only Mode will only work if you have enabled Application Control on your account.

Click the button that has the book and video camera icons next to the computer you wish to enable Learning Mode on.

Select either 'Learning Automatic Group', 'Learning Automatic Computer', or 'Learning Automatic System' from the menu.

Automatic Group will enable a one-hour Learning Mode on that computer. Blocking will be disabled and hreatLocker will catalog all files that are being installed and executing on that computer and automatically create policies for the computer group the selected computer is in. All activity will be recorded in the Unified Audit.
Automatic Computer will begin a one-hour Learning Mode on that computer. Blocking will be disabled and ThreatLocker will catalog all files that are being installed and executing on that computer and automatically create policies for just that single computer. All activity will be recorded in the Unified Audit.
Automatic System will begin a one-hour Learning Mode on that computer. Blocking will be disabled and ThreatLocker will catalog all drivers and miscellaneous Windows files specific to that computer and create a policy for them for that single computer. All activity will be recorded in the Unified Audit.

After you make your selection, the button will change color and the selected mode will be listed below the computer name.

To end any of the Maintenance periods before the hour is up, click the desired button a second time. Select 'Yes' to confirm you wish to end the Maintenance period.

Enabling Monitor Only Mode

Select the button that has the book and video camera icons.

Select 'Monitor Only' from the menu.

This will place the selected computer into a Monitor-Only status. No files will be blocked, nothing will be learned, and no policies will be created. All activity will be tracked in the Unified Audit.

To end the Maintenance period early, click the button a second time and then click End.