Collectors - Hilt Documentation

Collectors is the fleet inventory. Linux (eBPF) and macOS (Endpoint Security) hosts appear together. Landing tabs: Hosts and Groups.

Hosts and Groups

Filter	Meaning
All Hosts	Full roster
Active	Recently seen / healthy
Offline	Stale or dead collectors

KPI strip: online / offline / total, hosts with findings, quarantined. Add Collector starts onboarding. Open a row to slide a collector sheet over the table (/collectors/:hostId).

Collector sheet

Tab	What it shows
Overview	Identity, metrics, uptime (quarantine intervals overlay online/offline), containment
Files	Filesystem explorer for this host (including removable media on macOS)
Networks	Flows for this host. macOS adds Desktop / Browser sub-tabs
Processes	Process lineage for this host
Credentials	Credential and privacy access on this host

Containment (quarantine / release) lives here — host network isolation, blast radius, readiness. There is no separate Quarantine sidebar row.

Deploy Linux: Linux Collector
Deploy macOS: macOS Collector
Identity view → People
Event search → Logs

Last modified on October 8, 2026