Skip to content

Install Lookout

Lookout is Trimtab's read-only agent for Windows. It runs as two scheduled tasks under the SYSTEM account and reports to the Bridge over HTTPS.

Requirements

Requirement Details
Operating system Windows 10, Windows 11, or Windows Server
PowerShell Windows PowerShell 5.1 (built into Windows)
Rights Local administrator to install
Network Outbound HTTPS (port 443) to app.trimtabsec.com. No inbound ports.
Disk Under 1 MB for the agent, plus up to 30 recent results

Application control

If you use application control such as ThreatLocker, allow powershell.exe to run scripts from C:\Program Files\Trimtab\ as SYSTEM, and allow the installer to run from wherever you place it. Otherwise installs and daily scans are blocked. See Troubleshooting.

Download

Download Lookout 0.4.0

The SHA-256 checksum is published in checksums.txt. Verify it before deploying:

Get-FileHash .\trimtab-lookout-0.4.0.zip -Algorithm SHA256

The latest version is always available at https://docs.trimtabsec.com/downloads/trimtab-lookout-latest.zip.

Install on one device

Open PowerShell as administrator and run:

Expand-Archive .\trimtab-lookout-0.4.0.zip -DestinationPath C:\Temp\trimtab-lookout -Force
powershell.exe -NoProfile -ExecutionPolicy Bypass -File C:\Temp\trimtab-lookout\agent\Install-ComplianceAgent.ps1 `
  -ServerUrl https://app.trimtabsec.com -EnrollmentKey ek_your_key_here

The installer:

  1. Copies Lookout to C:\Program Files\Trimtab.
  2. Registers the device with the client that owns the enrollment key.
  3. Stores the device's credential, encrypted, in C:\ProgramData\Trimtab.
  4. Creates the Trimtab Lookout Scan and Trimtab Lookout Upload scheduled tasks.

Run the first scan now instead of waiting for the schedule:

Start-ScheduledTask -TaskName 'Trimtab Lookout Scan'

Installer options

Parameter Description
-ServerUrl The Bridge address: https://app.trimtabsec.com
-EnrollmentKey The client's enrollment key. Omit it to update an already-enrolled device.
-DailyAt Time of the daily scan, for example 13:00. Defaults to 10:00, plus up to 15 minutes of random delay.
-Uninstall Removes Lookout, its tasks, and its stored credential.

Next