Security Basics mailing list archives

RE: Microsoft Software Auditing ?


From: "Charles Otstot" <charles.otstot () ncmail net>
Date: Tue, 5 Apr 2005 13:09:39 -0400



-----Original Message-----
From: Robert Holtz [mailto:robert.d.holtz () gmail com] 
Sent: Tuesday, April 05, 2005 9:24 AM
To: Michael Gale
Cc: security-basics () securityfocus com
Subject: Re: Microsoft Software Auditing ?

You could do something as simple as:

dir *.exe /s > foo.all.of.the.exe.files.txt


Assuming the box to be audited is a Windows system, this might not be a
simple task as the output on any given box would encompass several hundred
.exe's for OS files. This obviously doesn't include any executables for
end-user applications or other sources. The time to script paring down the
output and gathering any useful information would probably be rather lengthy
as one would have to identify whether xyz.exe belongs to the OS, a vendor's
OS build (if OEM), etc. Then once you get rid of all the fluff that belongs
on every box, you'll have to repeat the same for each box audited to
identify each of the executable files and their sources, a potentially
daunting task depending upon the number of boxes, the number of different
hardware configurations and the complexity of installed applications.



On Apr 1, 2005 10:36 PM, Michael Gale <michael.gale () bluesuperman com> wrote:
Hello,

       Does any body know of any free / cheap Microsoft auditing software
?
Ideally I would like something that could be run from a login script,
that would find all the software currently installed and either:

store it in a network drive (excel, html,txt)
e-mail the data

I do not want to have to take out a loan to buy this software.

preferably open source :)

Michael


---------------------------------------------------------------------------
Earn your MS in Information Security ONLINE
Organizations worldwide are in need of highly qualified information
security
professionals.  Norwich University is fulfilling this demand with its MS
in
Information Security offered online.  Recognized by the NSA as an
academically excellent program, NU offers you the opportunity to earn your
degree without disrupting your home or work life.

http://www.msia.norwich.edu/secfocus_en

----------------------------------------------------------------------------



---------------------------------------------------------------------------
Earn your MS in Information Security ONLINE
Organizations worldwide are in need of highly qualified information security

professionals.  Norwich University is fulfilling this demand with its MS in 
Information Security offered online.  Recognized by the NSA as an 
academically excellent program, NU offers you the opportunity to earn your 
degree without disrupting your home or work life.

http://www.msia.norwich.edu/secfocus_en
----------------------------------------------------------------------------




---------------------------------------------------------------------------
Earn your MS in Information Security ONLINE
Organizations worldwide are in need of highly qualified information security 
professionals.  Norwich University is fulfilling this demand with its MS in 
Information Security offered online.  Recognized by the NSA as an 
academically excellent program, NU offers you the opportunity to earn your 
degree without disrupting your home or work life.

http://www.msia.norwich.edu/secfocus_en
----------------------------------------------------------------------------


Current thread: