Home

reportmate-client-win

The ReportMate Windows agent. It is a .NET command-line program that runs as SYSTEM on a scheduled task, collects device data from osquery, WMI, the registry, PowerShell and the Windows event log, and posts it to a ReportMate API as one JSON payload.

The agent has no service, no listener and no GUI in the collection path. Every run is a single invocation of managedreportsrunner.exe that finishes and exits. A second, small binary — usagetracker.exe — runs in each interactive user session to record per-application foreground and active time, which a process running in session 0 cannot observe. A desktop app, the Managed Reports Runner App, ships beside them for editing settings, starting a run and reading logs.

Collection is split into ten modules. A run collects one, several or all of them, merges the results into a single payload, writes it to a timestamped cache directory, and POSTs it to /api/v1/events.

Where it sits

osquery + WMI + registry + PowerShell + event log
        |
        v
managedreportsrunner.exe   (module processors)
        |
        v
C:\ProgramData\ManagedReports\cache\<timestamp>\event.json
        |
        v
POST /api/v1/events  ->  reportmate-api  ->  reportmate-app-web

This wiki

Page	What it covers
Getting Started	Install, point the agent at an API, verify a check-in
Installation	Package formats, install locations, scheduled tasks, uninstall
Configuration	Registry keys, precedence, the credential store, every setting and environment variable
Modules	The ten collection modules and the JSON each one emits
Architecture	Run flow, payload shape, caching, transport
Command Line Reference	Commands, options and exit codes
Managed Reports Runner App	The Prefs / Run / Logs desktop app
Logging	Log files, verbosity levels, transmission logs, retention
Building and Releasing	build.ps1, package outputs, CI and release workflows
Troubleshooting	Failure modes visible in the code, and what to do
Development	Clone, build, test, run a single module locally

Other ReportMate repos

Repo	Wiki	What it is
reportmate-api	wiki	FastAPI ingest + query backend; receives /api/v1/events
reportmate-app-web	wiki	Next.js dashboard
reportmate-client-mac	wiki	macOS agent, the counterpart to this one
reportmate-cli	wiki	Cross-platform admin CLI
reportmate-mcp	wiki	MCP server exposing the fleet to AI agents
terraform-azurerm-reportmate	wiki	Azure deployment module
terraform-aws-reportmate	wiki	AWS deployment module
selfhosted-docker-reportmate	wiki	Docker Compose stack + Packer appliance
reportmate-website	wiki	Marketing site, reportmate.app