ET Ducky changelog, October 8, 2026

These changes cover how Network Discovery sorts hosts the scan could not identify, and the run-as user label in the Live Session shell.

Fixed

• In Network Discovery, the agent-compatible filter on the Devices view now keeps hosts the scan could not fingerprint, so a Windows or Linux machine whose firewall blocks the probe ports shows up as an enrollment candidate.
• The Non-computers view lists only hosts whose MAC vendor matches a printer, network device, camera, phone, mobile, IoT, smart home, or storage vendor, and the Topology map colors the hosts the scan could not fingerprint with the other candidate hosts.
• The run-as user label in the Live Session shell toolbar uses the toolbar's colors, fits inside the session window, and is no longer highlighted by a stray mouse drag (the option is described under Execution Identity in the Security documentation).

Coverage, the per-subnet counts, and the deploy-target total still count only hosts fingerprinted as Windows or Linux.