Last Modified Date
3/11/2021 6:52 PMDescription
Monitors the age of the last VSS Snapshot created for all 'fixed' local drives and fails if any VSS Snapshot is older than the specified threshold.
Consider pairing with EDR to monitor if timely VSS Snapshots are available on the system which can help improve resiliency of EDR's Rollback feature.
Type
Custom Service / Script Check
Category
Windows File System
Target OS
Windows 8/8.1;Windows 10;Windows Server 2012 / 2012R2;Windows Server 2016;Windows Server 2019
Compatible with N-central
No
N-central minimum version
Compatible with RMM
Yes
Syntax
Threshold can be set to any hourly interval. Default is 24 Hours.
Output
Check Failure will indicate at least one drive does not have a VSS Snapshot available younger than the threshold. See the 'More Information" column for specific drive.
Keywords
VSS Snapshot age EDR endpoint detection and response