Nightfall for Windows OS allows you to detect exfiltration events on your Windows OS devices. The Nightfall exfiltration feature can monitor any files being uploaded through supported cloud storage apps or browsers on Windows OS devices.
To use Nightfall for macOS, you must install the Nightfall AI agent. This agent monitors your Windows OS device continuously. You can install the agent either manually or through a Mobile device management (MDM) tool. You can request the Nightfall deployment bundle which contains the data required for your MDM deployment.
Nightfall supports the following agent installation methods Windows OS.
Learn how to install the Nightfall agent on Microsoft Windows OS using the Rippling MSI payload.
You have a method to execute arbitrary commands remotely as Administrator on all installation targets.
You have received and unpacked the Nightfall Endpoint payload.
You have hosted the delivered .MSI payload on an HTTPS server which is reachable by all installation targets.
Execute the following Powershell script on all target machines replacing $ApiKey and $CompanyId with the values provided to you by Nightfall:
Learn how to install the Nightfall agent on Microsoft Windows OS using the Rippling MDM.
You have the Device Administrator role in Rippling.
Target Windows devices have been onboarded into Rippling MDM.
You have received and unpacked the Nightfall Endpoint payload.
Navigate to: https://app.rippling.com/hardware/software
Click Upload Software on the right of the pane and provide the following details.
Name: “Nightfall Endpoint DLP Agent <version>”
<version> is the version of the package your received from Nightfall.
Operating System: “Windows”
Category: “My Uploads” (Default)
Description: “Nightfall Endpoint DLP Agent”.
Upload Icon: use the .png icon file provided.
Upload Installer File: drop or select the provided NightfallAgent.msi file.
Under Silent arguments add /qn /norestart API_KEY='' COMPANY_ID='' where the content of API_KEY and COMPANY_ID are the values provided to you by Nightfall. Note that these values mus be enclosed in ' single quote characters.
Click Submit.
You will receive an email from Rippling with the subject: “Your recently uploaded custom software is processing”
After a period of time (typically less than 1 hour) You will receive an email from Rippling: “Your recently uploaded custom software has been processed successfully!”
You may now proceed to step 2. to deploy the agent.
Click Add on the newly created Software Item in the Rippling Software Catalog.
Click Finished Selecting.
Search or scroll to the newly added item matching the name you used in the previous step.
Click Edit
Select all employees or specific target devices.
Click Save.
The Nightfall Endpoint DLP Agent will now deploy to all selected target devices. This may take up to 72 hours and is dependent on the endpoint devices being turned on, connected.
The below describes the steps to upgrade endpoints with a new version of the agent:
Search or scroll to the old version of the Nightfall Endpoint DLP Agent and click Edit.
Remove all devices from the installation list and click Save.
Follow the steps to configure the new software package for the new version
Follow the steps to deploy the new version.
The Nightfall Endpoint DLP Agent will now deploy to all selected target endpoints. Installation may take up to 48 hours and is dependent on the endpoint devices being turned on and connected.
Learn how to install the Nightfall agent on Microsoft Windows OS manually.
This document outlines the steps to manually deploy the Nightfall AI Agent on a Windows device.
Ensure that Windows endpoint has been enabled on your Nightfall tenant.
Obtain the Nightfall AI Agent .msi file from Nightfall
Copy or download the provided .msi file to the target machine.
Run the Installer by executing the following sub-steps.
Navigate to the .msi package.
Right-click the file and select Run as administrator.
Verify the installation by executing the following sub-steps.
Once installation is complete, check if the agent is running:
Open Task Manager (Ctrl + Shift + Esc).
Look for the Nightfall Agent & NightfallUI process under the Processes tab.
Confirm the Nightfall agent is configured to your Nightfall tenant by executing the following sub-steps.
On the windows device:
Double-click the Nightfall agent icon in the status bar.
The displayed UUID should match your Nightfall tenant UUID located under https://app.nightfall.ai/settings/
On the Nightfall console:
The newly configured device should be listed under https://app.nightfall.ai/endpoint
The Nightfall AI Agent should now be successfully installed, running on your Windows machine, and connected to your Nightfall tenant. If you run into any issues, please contact Nightfall AI support.