Custom Checks are currently added by request only by the Kolide staff. If you would like a custom check added to your account, please reach out via Intercom, or by emailing, and we will follow up within 24-48 hours. 

We suggest utilizing the template below to help us create your check:

Check Template:

Check Name (Short Name of Desired State):
Windows Firewall Enabled

Check Logic (What does this Check look for?):
The state of the Windows Firewall, as reported by the Windows Registry.

Check Description (Why is this Check important?):
The Windows Firewall should be enabled in order to...

Check Remediation Instructions (How can a user fix their device?):
To enable the Windows Firewall complete the following steps:

  1. Open the Start Menu...

Platforms to run Check against:
Windows Only

When will I be able to create checks on my own?

The ability to create checks based on inventory filters or or osquery SQL is under active development and will be available this year (2019). Stay tuned for an email announcing its availability. 

Did this answer your question?