Skip to content

Install and verify Aurora Lite

Prepare an authorised Windows endpoint, install Aurora Lite with its local dashboard, and verify that the service and rules are ready before testing detections.

Before you begin

You need an administrator account, a restorable Windows VM, the Aurora package and licence, and access to the vendor's update servers while preparing the agent. Aurora runs on Windows; consult the current vendor documentation before substituting a different release or operating system.

Use a narrow security exclusion

The original PoC records that Windows Defender was temporarily disabled during download. Prefer a vendor-approved, file-specific exclusion for the verified Aurora executable. Do not disable endpoint protection broadly or leave an exclusion in place after the lab without approval.

Download the package

The complete guide preserves the original registration, confirmation, licence, and download sequence:

  1. Open the Aurora product page and select Aurora Lite.

    Aurora product page showing the Aurora Lite download option

  2. Submit the registration form.

    Aurora Lite registration form requesting contact details

  3. Confirm the email address.

    Aurora Lite email confirmation screen

  4. Download the licence and agent package.

    Aurora Lite download page containing the licence and Windows agent

Read the complete original download procedure.

Install with the dashboard

  1. Extract the package to a temporary folder such as C:\aurora.
  2. Place the .lic file in that folder.
  3. Open Command Prompt as Administrator.
  4. Change to the extracted folder.
  5. Install Aurora with its local dashboard:
cd C:\aurora
aurora-agent.exe --install --dashboard
  1. Confirm the agent files are installed under C:\Program Files\Aurora-Agent\ and open the local dashboard.

Command prompt showing a successful Aurora Agent service installation

Aurora local dashboard showing events in the Overview table

Verify the baseline

Before generating a test event, record the service status, selected configuration preset, successful rule loading, dashboard access, and baseline timestamp.

aurora-agent.exe --status
aurora-agent.exe --status --trace

Checkpoint

Continue only when the service is running, signatures load without an unresolved error, and the dashboard opens locally at http://localhost:17494/ui/dashboard/overview.

Troubleshooting shortcuts

Problem Check first
Package is blocked Verify the source and hash, then use the narrow approved exclusion described above.
Licence is not detected Confirm the .lic file is beside the executable before installation.
Dashboard does not open Confirm installation used --dashboard, then check service status and port 17494.
Rules do not load Review Status and the Windows Application event log before changing configuration.
PreviousAurora Lite overviewNextConfigure and maintain