Security ● Sealed v1.0 (treated)

Continuous Endpoint Telemetry

Closes the SysTrack competitive gap by sampling endpoint performance counters at a configurable interval over a configurable window, then computing baseline statistics and anomaly counts

What it does

Closes the SysTrack competitive gap by sampling endpoint performance counters at a configurable interval over a configurable window, then computing baseline statistics (mean, p50, p95, p99) and anomaly counts. Unlike point-in-time snapshots (e.g. EndpointDiscovery), this module captures performance variance over time and produces a pre-migration baseline that can be replayed against post-migration measurements to detect regressions. Counters sampled per interval: - CPU total % - Memory in-use % - Disk queue length (avg of physical disks) - Network total Mbps (sum of active adapters) - Process count - Top CPU-consuming process name

How the app exposes it

The module feeds into the ACQI app's dedicated results view. From there, conflicts, dependencies, and readiness scores roll up into the deal workspace.

Route in app:
/discovered/continuous-endpoint-telemetry

Outputs

Each module produces a CSV with readiness and risk scores, evidence-source counts, and last-seen timestamps. The exact columns vary by module — the app's results view shows the live schema.