Sensor Downloads

The Sensor Downloads page provides downloadable sensor binaries for all supported platforms. Administrators use this page to download the correct binary before deploying sensors to target machines.

INFO

Requires Admin role or higher.

Accessing Sensor Downloads

Navigate to Settings > Sensor Downloads in the left sidebar.

Available Platforms

AttackLens provides pre-built sensor binaries for the following platforms and architectures:

Platform	Architecture	Filename	Use Case
Linux	amd64 (x86_64)	sensor-linux-amd64	Most Linux servers and workstations (Intel/AMD processors).
Linux	arm64 (aarch64)	sensor-linux-arm64	ARM-based Linux servers (AWS Graviton, Ampere, Raspberry Pi 4+).
Windows	amd64 (x86_64)	sensor-windows-amd64.exe	Windows servers and workstations (Intel/AMD processors).
macOS	amd64 (x86_64)	sensor-darwin-amd64	Intel-based Macs.
macOS	arm64 (Apple Silicon)	sensor-darwin-arm64	Apple Silicon Macs (M1, M2, M3, M4).

Downloading a Binary

1. Locate the row for your target platform and architecture.
2. Click the Download button.
3. The binary is downloaded directly from your AttackLens instance.

The downloaded binary is ready to use. Follow the deployment guide for your platform:

• Deploy on Linux
• Deploy on Windows
• Deploy on macOS

How Binaries Are Served

Sensor binaries are stored locally on your AttackLens backend instance. They arrive through the component update system:

1. The UpdateWorker checks the AttackLens license server for new sensor versions every 6 hours.
2. When a new version is available, the backend downloads the binary for each platform/architecture combination.
3. The binaries are stored in the local object storage (MinIO).
4. The Sensor Downloads page serves binaries from this local storage.

TIP

Because binaries are served from your own infrastructure, downloading sensors does not require internet access from the machine where you are downloading. This is particularly useful in air-gapped or restricted network environments where endpoints cannot reach external servers.

Version Information

The downloads page shows the current sensor version available for download. This is the version that will be installed when you deploy a new sensor.

Field	Description
Version	The CalVer version of the available binaries (e.g., 2026.04.0).
Published	When this version was published.
Changelog	A brief summary of changes in this version (if available).

INFO

Already-deployed sensors update themselves automatically. You only need to download binaries from this page for initial deployments of new sensors. See Sensor Auto-Update for details on how existing sensors stay current.

Checksums

Each binary download includes a SHA-256 checksum that you can use to verify the integrity of the downloaded file. To verify:

Linux / macOS

sha256sum sensor-linux-amd64

Compare the output with the checksum displayed on the downloads page.

Windows (PowerShell)

Get-FileHash -Path sensor-windows-amd64.exe -Algorithm SHA256

Compare the Hash value with the checksum displayed on the downloads page.

Troubleshooting

No binaries available

If the downloads page shows no available binaries, the backend has not yet synced sensor binaries from the license server. This can happen:

• After a fresh installation before the first UpdateWorker cycle completes.
• If the backend cannot reach the license server.

Click Check for Updates on the Settings > Feed and Updates page to trigger an immediate sync.

Download fails

• Verify your browser can reach the AttackLens backend.
• Check that the backend's object storage (MinIO) is running and healthy.
• Review the backend logs for storage-related errors.