Security Basics mailing list archives

RE: Microsoft Software Auditing ?


From: "Beauford, Jason" <jbeauford () EightInOnePet com>
Date: Wed, 6 Apr 2005 17:21:58 -0400

I like pstools from www.sysinternals.com

Psinfo -s >> \\<SERVER>\<SHARE>\<filename>.txt

Want to know about hotfixes?

Psinfo -h >> blah..blah..blah..

Of course it only works on W2K and Up.

OR

If you only care about MS Products installed on MS machines use the MS
Software Inventory Analyzer:
http://www.microsoft.com/resources/sam/msia.mspx


-jmb

-----Original Message-----
From: Charles Otstot [mailto:charles.otstot () ncmail net] 
Sent: Tuesday, April 05, 2005 1:10 PM
To: security-basics () securityfocus com
Subject: RE: Microsoft Software Auditing ?




-----Original Message-----
From: Robert Holtz [mailto:robert.d.holtz () gmail com] 
Sent: Tuesday, April 05, 2005 9:24 AM
To: Michael Gale
Cc: security-basics () securityfocus com
Subject: Re: Microsoft Software Auditing ?

You could do something as simple as:

dir *.exe /s > foo.all.of.the.exe.files.txt


Assuming the box to be audited is a Windows system, this might not be a
simple task as the output on any given box would encompass several
hundred .exe's for OS files. This obviously doesn't include any
executables for end-user applications or other sources. The time to
script paring down the output and gathering any useful information would
probably be rather lengthy as one would have to identify whether xyz.exe
belongs to the OS, a vendor's OS build (if OEM), etc. Then once you get
rid of all the fluff that belongs on every box, you'll have to repeat
the same for each box audited to identify each of the executable files
and their sources, a potentially daunting task depending upon the number
of boxes, the number of different hardware configurations and the
complexity of installed applications.



On Apr 1, 2005 10:36 PM, Michael Gale <michael.gale () bluesuperman com>
wrote:
Hello,

       Does any body know of any free / cheap Microsoft auditing 
software
?
Ideally I would like something that could be run from a login script, 
that would find all the software currently installed and either:

store it in a network drive (excel, html,txt)
e-mail the data

I do not want to have to take out a loan to buy this software.

preferably open source :)

Michael


------------------------------------------------------------------------
---
Earn your MS in Information Security ONLINE
Organizations worldwide are in need of highly qualified information
security
professionals.  Norwich University is fulfilling this demand with its 
MS
in
Information Security offered online.  Recognized by the NSA as an 
academically excellent program, NU offers you the opportunity to earn 
your degree without disrupting your home or work life.

http://www.msia.norwich.edu/secfocus_en

------------------------------------------------------------------------
----



------------------------------------------------------------------------
---
Earn your MS in Information Security ONLINE
Organizations worldwide are in need of highly qualified information
security

professionals.  Norwich University is fulfilling this demand with its MS
in 
Information Security offered online.  Recognized by the NSA as an 
academically excellent program, NU offers you the opportunity to earn
your 
degree without disrupting your home or work life.

http://www.msia.norwich.edu/secfocus_en
------------------------------------------------------------------------
----




------------------------------------------------------------------------
---
Earn your MS in Information Security ONLINE
Organizations worldwide are in need of highly qualified information
security 
professionals.  Norwich University is fulfilling this demand with its MS
in 
Information Security offered online.  Recognized by the NSA as an 
academically excellent program, NU offers you the opportunity to earn
your 
degree without disrupting your home or work life.

http://www.msia.norwich.edu/secfocus_en
------------------------------------------------------------------------
----


---------------------------------------------------------------------------
Earn your MS in Information Security ONLINE
Organizations worldwide are in need of highly qualified information security
professionals.  Norwich University is fulfilling this demand with its MS in
Information Security offered online.  Recognized by the NSA as an
academically excellent program, NU offers you the opportunity to earn your
degree without disrupting your home or work life.

http://www.msia.norwich.edu/secfocus_en
----------------------------------------------------------------------------


Current thread: