View in browser

When using the ThreatLocker Application Control agent, certain information is collected to provide the services. ThreatLocker does not share information collected by the ThreatLocker agent with third parties. 

The following document outlines the information collected by the ThreatLocker Application Control agent.

1. Computer Hostname.
2. Public IP Address of the Computer;
3. The date and time the agent connected to the ThreatLocker data centers;
4. Logged in Username of the Computer, including the domain name (e.g. DOMAIN\JohnDoe).
5. When a program file is executed on the endpoint, the following information is collected and stored in the audit: 
1. The full path of the file
2. An irreversible hash of the file
3. Information about the signer of the file, including the certificate subject and SHA
4. The file size
5. The serial number of the hard drive
6. The username that opened the file
7. The computer name that the file was opened on
6. In addition to section 5, the ThreatLocker Agent also collections the same information for programs and executables found on the computer during the initial baseline. This information is only collected for the initial policy creation and is only stored temporarily. 

ThreatLocker stores information for the retention period defined in the Customer Agreement. The default retention for Application Control is 30 days but can be extended for an additional charge or reduced without charge.