Stable downloads: https://download.cmtraceopen.com/?source=github-release
CMTrace Open v1.6.0
The first release to carry the ConfigMgr/SCCM diagnostics work and the expanded Intune parser family. None of it was in 1.5.2: that was a scoped patch cut from the 1.5.1 branch for a single clipboard fix, so everything below is new to anyone upgrading from it.
Highlights
ConfigMgr/SCCM diagnostics, client and server — a native evidence path with a diagnostics workspace behind it: site core, management point, distribution point, software update point, hierarchy and replication, task-sequence provenance, client health, policy, deployment, updates, and inventory/compliance/metering analysis, plus bounded database export and advanced server capture contracts. Every finding cites the artifact it came from, coverage gaps stay visible instead of being reported as success, and nothing is inferred from timestamp proximity.
The Intune parser family, well past IME and ESP — Win32 app deployment transactions, Windows configuration policy evidence, Microsoft Store app evidence, Company Portal on Windows (LocalState), macOS (Apple unified log) and iOS/iPadOS (Console exports), the full Device Inventory Agent log family with rotation-aware tailing, an Autopilot evidence parser that works outside the ESP workspace, and a four-phase Windows compliance analyzer that will not promote a Conditional Access denial into a local setting verdict.
Privacy fixed at the export boundary — the ESP session export and the Intune Compliance lane were each binding at the wrong place. Both now project at the crate boundary, so an unredacted snapshot can no longer be written to a file you choose, and SIDs, tenant domains and device names no longer survive an export.
Microsoft Graph sign-in without freezing the UI — enable Graph with an explicit Sign in, cancellable interactive auth, and fast-fail when the host cannot do it (personal MSA, missing org account, provider unavailable). The Entra interactive path is retained where real consent is needed.
Restart as administrator, keeping your work — an application-wide elevated restart that restores the sources you had open.
Upgrading from 1.5.2
- msiexec /i app-1.6.0-x64.msi DISABLEUPDATECHECKS=1 now completes. On managed Windows 11 running Constrained Language Mode the custom action threw, and with the install not tolerated to continue it rolled the whole installation back; the policy is written through the 64-bit reg.exe instead (#576).
- Auto-update is intact: latest.json is rebuilt from the release's own signature assets and carries all eight updater targets — both Windows architectures, the macOS app and its archive, and the AppImage, .deb and .rpm.
- winget carries 1.6.0. Scoop is one review away: the bucket update is open as a pull request (#625), and until it merges scoop install cmtrace serves the previous version. The shortlinks below are unaffected either way.
Download shortlinks
Each shortlink always resolves to the current stable release, so it stays valid in
tickets, runbooks, and slides long after this page scrolls out of view.
──────────────────────────────┬───────────────────────────────
Platform │Shortlink
──────────────────────────────┼───────────────────────────────
Windows x64, portable EXE │https://win.cmtrace.net
──────────────────────────────┼───────────────────────────────
Windows ARM64, portable EXE │https://winarm.cmtrace.net
──────────────────────────────┼───────────────────────────────
Windows x64, Lite portable EXE│https://lite.cmtrace.net
──────────────────────────────┼───────────────────────────────
Windows x64, MSI installer │https://msi.cmtrace.net
──────────────────────────────┼───────────────────────────────
macOS Apple silicon, DMG │https://mac.cmtrace.net
──────────────────────────────┼───────────────────────────────
Linux x64, AppImage │https://linux.cmtrace.net
──────────────────────────────┴───────────────────────────────
Nightly channel: https://nightly.cmtrace.net
Artifacts in v1.6.0
─────────────────────┬─────────────────────────────────────────────────────────────────
Platform │Files
─────────────────────┼─────────────────────────────────────────────────────────────────
Windows x64 and ARM64│signed .msi, signed portable .exe (Full and Lite), signed
│-setup.exe
─────────────────────┼─────────────────────────────────────────────────────────────────
macOS Apple silicon │signed and notarized .dmg, plus the .app.tar.gz updater archive
─────────────────────┼─────────────────────────────────────────────────────────────────
Linux x64 │.AppImage, .deb, .rpm
─────────────────────┴─────────────────────────────────────────────────────────────────
The MSI installs both the Full and Lite editions. Portable EXEs require no installation.
CycloneDX SBOMs (sbom-rust.cdx.json, sbom-npm.cdx.json) and build provenance
attestations are published alongside the binaries.
What else changed
The release notes above are a digest, not the whole list — this one carries a
great deal of parser hardening, privacy work and dependency maintenance.
- Full changelog: CHANGELOG.md
- Every commit: v1.5.2...v1.6.0
