Welcome to Sentinel Endpoint Monitoring

An introduction to Sentinel for IT administrators, system engineers, and technicians.

Sentinel Operations Team

4 min read

Updated August 28, 2026

v3.2

Sentinel Endpoint Monitoring is a lightweight, enterprise-grade endpoint telemetry and security management platform. It is engineered specifically for IT administrators, helpdesk technicians, and security operations engineers who need complete visibility over physical laptops, virtual machines, and remote workstations across their organization.

Tip

Designed for Technicians & Non-Coders

You do NOT need programming or coding experience to manage Sentinel. Everything is configured through the intuitive Sentinel Web Console or simple, human-readable configuration files.

How Sentinel Works in Plain English

Sentinel operates on a simple two-tier architecture: the **Sentinel Management Console** (the central cloud/on-prem dashboard where you manage everything) and the **Sentinel Agent** (a tiny, ultra-efficient background service installed on client computers).

Component	Where It Runs	What It Does For You
Sentinel Management Console	Web Browser (Cloud or Internal Server)	The central dashboard where admins view device status, configure security policies, investigate alerts, and run remote commands.
Sentinel Agent Service	Client Workstation / Laptop (Background)	Runs silently as a Windows Service / Systemd daemon. Gathers system health, application usage, USB connections, and uploads data every 30 seconds.
Local Offline Queue	Client Disk (Encrypted SQLite)	Caches events safely if a laptop goes offline or travels without internet. Flushes automatically once reconnected.

Sentinel Management Console — Live Device Inventory

Console v3.2

Managed Endpoints

412 Online / 428 Total

Sync: 12s ago

Status	Hostname	Logged-In User	OS Build	Agent
Active	LAPTOP-FIN-019	corp\m.vasquez	Win 11 (23H2)	v3.2.4
Active	WS-ENG-8821	corp\d.kim	Ubuntu 22.04	v3.2.4
High CPU	MACBOOK-MKT-04	corp\a.wright	macOS 14.5	v3.2.0 (Update)

Pin #1:Device Status Indicator

Green indicates active real-time heartbeat (< 60s). Amber indicates high resource usage, and grey represents offline endpoints.

Pin #2:Agent Version & Build

Shows installed agent version. Outdated agents display an upgrade arrow for 1-click remote update.

Pin #3:Quick Remote Actions Menu

Click to trigger immediate policy sync, service restart, diagnostic bundle collection, or emergency isolation.

1Device Status Indicator

2Agent Version & Build

3Quick Remote Actions Menu

Figure 1.1: Live Device Inventory showing online/offline status, OS version, agent health, and quick actions.

Key Capabilities for IT Administrators

Real-Time Fleet Visibility

Instantly see which laptops are online, where they are connecting from, CPU/RAM usage, and active applications.

USB Storage & Hardware Security

Prevent data theft by blocking unauthorized USB flash drives or configuring them in Read-Only mode.

Remote Diagnostics & 1-Click Actions

Collect diagnostic logs, restart services, force policy synchronization, or isolate compromised endpoints with a single click.

Operations

IT Asset & Hardware Tracking

Maintain 100% accurate inventory of all corporate hardware, serial numbers, disk health, and software versions without manual spreadsheets.

Operational Impact: Saves 10+ hours per week during IT audits and hardware refresh cycles.

Security

Insider Threat & Removable Media Protection

Receive instant alerts whenever employees plug in USB flash drives or copy sensitive business files to unauthorized drives.

Operational Impact: Prevents data exfiltration and meets strict ISO 27001 / SOC 2 requirements.

Tags:#Overview#Getting Started#Architecture

Was this documentation page helpful?

Your technician feedback helps our team continuously improve Sentinel guides.

What is Sentinel? Architecture & Telemetry Engine