Network discovery

Agent installation scripts

The discovery agent is a small, read-only daemon that walks your LAN using ARP, mDNS, SSDP, SNMP and LLDP/CDP where available, and reports MAC-addressed finds back to AssetTrack. Run one agent per site or VLAN. Enrolment tokens are minted from Settings → Discovery → Agents and are single-use for 24 hours.

Windows (PowerShell)

Windows Server 2019+ or Windows 10/11 domain member. Run PowerShell as Administrator.

powershell

# Run in an elevated PowerShell prompt on Windows Server or a domain member.
# Replace <ENROLLMENT_TOKEN> with the token from Settings → Discovery → Agents.
$Token = "<ENROLLMENT_TOKEN>"
Invoke-WebRequest -UseBasicParsing `
  -Uri "https://salescollabassettrack.co.za/agent-scripts/windows.ps1" `
  -OutFile "$env:TEMP\assettrack-agent.ps1"
powershell -ExecutionPolicy Bypass -File "$env:TEMP\assettrack-agent.ps1" -EnrollmentToken $Token

Signed source: /agent-scripts/windows.ps1

Linux / macOS (bash)

Any glibc-based Linux from the last five years, or macOS 12+. Requires root for raw sockets used by ICMP/ARP.

bash

# Run as root (or via sudo) on a Linux box on the target subnet.
# Replace <ENROLLMENT_TOKEN> with the token from Settings → Discovery → Agents.
export ASSETTRACK_ENROLLMENT_TOKEN="<ENROLLMENT_TOKEN>"
curl -fsSL https://salescollabassettrack.co.za/agent-scripts/unix.sh | sudo -E bash

Signed source: /agent-scripts/unix.sh

What the agent does

Emits a heartbeat every 60s so you can see it's alive.
Runs scans on the cadence set per subnet (default hourly).
Honours per-subnet exclusion rules (IP, CIDR, hostname glob, MAC OUI, port).
Never writes to your endpoints. Never opens a listening port.
All traffic is outbound TLS to the AssetTrack API only.