Last Modified Date3/11/2021 6:52 PM
Monitors the age of the last VSS Snapshot created for all 'fixed' local drives and fails if any VSS Snapshot is older than the specified threshold.
Consider pairing with EDR to monitor if timely VSS Snapshots are available on the system which can help improve resiliency of EDR's Rollback feature.
Custom Service / Script Check
Windows File System
Windows 8/8.1;Windows 10;Windows Server 2012 / 2012R2;Windows Server 2016;Windows Server 2019
Compatible with N-central
N-central minimum version
Compatible with RMM
Threshold can be set to any hourly interval. Default is 24 Hours.
Check Failure will indicate at least one drive does not have a VSS Snapshot available younger than the threshold. See the 'More Information" column for specific drive.
VSS Snapshot age EDR endpoint detection and response