Installing the NISSI Agent on Your Devices
Installing the NISSI Agent on Your Devices
The NISSI Endpoint Agent is a cross-platform Python agent that monitors processes, network activity, and DNS queries, then reports telemetry to NISSI Command Center.
What the Agent Does
Detection Capabilities:
- Behavioral process analysis (heuristics)
- DNS monitoring (passive, no interception)
- YARA file scanning (trigger-based)
- Network reputation analysis
- CPU/Memory anomaly detection
Remote Actions (from Command Center):
- Kill suspicious processes
- Network isolation (requires admin rights)
- Remote reboot/shutdown
- Trigger file scans
- Real-time telemetry streaming
Supported Platforms
The current Python Agent is production-ready and works on:
- Windows 10, 11, Server 2019+
- macOS (Monterey, Ventura, Sonoma)
- Linux (Ubuntu, Debian, RHEL)
Native agents for Windows (C++), macOS (Swift/Objective-C), and Linux (Rust) are currently in development with kernel-level protection capabilities.
Installation Steps
1. Get Your Device ID
- In NISSI Command Center, go to Devices in the sidebar
- Click Add a Device
- Copy your Device ID — you'll need it below
2. Install Python Dependencies
pip install psutil requests yara-python scapy
Optional (for C-level performance):
pip install cython
3. Download the Agent
- In Command Center, click AgentDownload in the sidebar (or click Download Agent from the Dashboard)
- Click Download Python Agent (nissi-agent.py)
4. Configure and Run
export NISSI_DEVICE_ID="your-device-id"
export NISSI_API_KEY="your-api-key"
python3 nissi-agent.py
The agent will start monitoring your system immediately and report to NISSI every 60 seconds. You can verify it's working by checking your device status in Command Center under Devices.
Mobile Device Enrollment
For mobile endpoint protection, visit agent.nissi.systems on the device:
- Enter a Device Name (e.g., "My Android Phone")
- Enter your Work Email
- Tap Enroll & Protect Device
The mobile agent provides: real-time threat detection, AI-powered analysis, remote security commands, and encrypted telemetry.
Verifying Your Device is Active
After the agent starts, go to Devices in Command Center. Your device should appear in the list with an active status. DNS activity will begin appearing in DNS Query Log once the agent starts reporting.
Need Help?
Contact support or use the AI Assistant below.
Was this article helpful?