Moorfox documentation

Guides for the people who use Moorfox day to day: enrolling machines, getting onto them, and keeping a fleet organised once it is bigger than you can hold in your head. Every screenshot is from a live dashboard.

Where to start

If you have just been given an account, read Add a device and then Connect and manage. That is the whole loop: get a machine in, get onto it, fix the thing.

When the fix is a full disk, Disk usage shows what is filling it. Before a second person joins, read Users and permissions: roles, per-user toggles, and guest accounts that see only the machines you assign. Desktop widget and branding puts your name and support number on the machines you manage.

Groups and tags becomes worth reading at around the second dozen machines, and it is what alert routing is built on, so read those two in order. The security score is how you decide which machines to work on first, Bitdefender EDR is the paid add-on for the machines where prevention is not enough, network isolation is what you press when one of them looks infected, patching is how the most common finding on that list fixes itself every week, and automation is how you stop doing the same fix by hand. The activity log answers who did what, and the device page reference is there for when a pill appears that you have not seen before.

Add a device

To add a device to Moorfox, open Add device in the dashboard, choose Windows or Linux, then choose Easy to download an installer to run on the machine, or Advanced to copy a one-line command.

Connect and manage

To connect to a device in Moorfox, open it from the device list and press Connect for a remote desktop session, or use the Manage tab for a terminal, file explorer, process list and service control without taking over the screen.

Disk usage

The Disk usage tab on a Moorfox device scans a volume or folder on the remote machine and shows what is taking the space: a folder tree with size bars, a breakdown by file extension, the largest files and a treemap.

Groups and tags

In Moorfox a device belongs to exactly one group, which is how you split a fleet by customer or site, and carries any number of tags, which cut across groups.

Users and permissions

Moorfox has three roles: admin, technician and guest.

Desktop widget and branding

The Moorfox identity widget is a small panel on a managed Windows desktop showing the machine's name and address, who manages it and how to reach them.

Alerts and settings

Moorfox alert thresholds are set per type under Settings: CPU and memory each take a percentage and a sustained window, disk takes a percentage, offline takes a number of minutes, and Windows crashes are a switch.

Network isolation

Network isolation in Moorfox cuts a device off the local network and the internet while the Moorfox agent stays connected, so a machine you suspect is infected cannot reach file shares, other machines or the internet, and you can still remote in, run commands and pull files.

Security score

The Moorfox security score grades each machine out of 100 across fourteen factors, including disk encryption, antivirus, firewall, patch compliance and OS support.

Bitdefender EDR

Bitdefender EDR is a paid Moorfox add-on at $4 per device per month.

Patching

Moorfox agents scan Windows and Linux machines for pending updates, and a patch policy installs them inside a weekly window evaluated in each device's own timezone, optionally holding back anything that has been pending for fewer than a set number of days.

Automation

Moorfox automation has two layers: a command library of saved scripts, offered in the terminal and on the remote-desktop toolbar, and flows that chain those commands into a sequence run against a device as one unit, either manually or when a device is reported stolen.