Atera
May see Atera and Splashtop installed at the same time.
Event logs
| Event Log | Event ID | Provider | Notes |
|---|---|---|---|
| System | 11707 | MsiInstaller | MSI installation event |
| Security | 4688 | Security | File transfers may be shown as 64 encoded data |
There will also likely be EID 7045 Service installation event. Atera may also log in Application event logs under AlphaAgent or AteraAgent
Log files
| Log Path | Notes | Timestamp |
|---|---|---|
| AgentPackageRunCommandInteractive\log.txt | Logs remote interactive commands | DD/MM/YYYY HH:MM:SS |
| AgentPackageInternalPooler\log.txt | Interanl events and nothing interesting[2] | DD/MM/YYYY HH:MM:SS |
Install files
- AteraSetupLog.txt
- InstallUtil.logs
- C:\Program Files\Atera Networks
- C:\Program Files (x86)\Atera Networks
Registry
Registry key updated on install
- \HKEY_LOCAL_MACHINE\SOFTWARE\ATERA Networks\AlphaAgent**
Atera Account Information
If you have the Atera MSI, you can use a tool like ORCA to view the properties of the package and identify the Integrator Login ID (email account) This can also be identified by commandline logging during installation.