What is a Sighting?
Sightings are the occurrences an object was seen in a customer environment. These sightings can be actual or virtual. Actual meaning the file was gathered from an asset via a forwarder or Swell CLI and virtual meaning the file was sent through an integration (ex. a historic record of a file's location from an EDR where the source file no longer exists) or the exact same file already exists in the customer's environment and does not require an upload.
Note:
Sighting counts do not equal the asset counts.
Updated 11 months ago