Mostly just listening for keywords that wake it up and send a small true-false keyword thing, I’d assume. Maybe stores it locally and sends out once/day or something? Could be as part of the check for updates process.

Rig it up to something to detect all target IP addresses is a good start.