Searching Domain for Files

[bytesabit at gmail.com (bytes abit)]

If they are all Windows machines, you could put a vbs script in GPO that
calls upon the systems to search for the files desired and do something
simple like copy them to a waiting share...

It would have to be in the "hardware" half in startup scripts... I used this
similar method in reverse to copy over the last admins LMHOSTS and HOSTS
files that were ever so elegantly created.  :P


-- All systems will have to be rebooted


On Fri, May 28, 2010 at 10:47 AM, David Kovar <dkovar at gmail.com> wrote:

> Greetings,
>
> There are various tools that use a servlet running with administrator
> rights on the various targets controlled by one or more management
> systems. You can purchase the software or you can contract with the
> company to lease you the software under a professional services
> arrangement if this is a one time thing.
>
> Disclaimer: I work for such a company so I'm intentionally not
> including specific names.
>
> -David
>
>
> On Thu, Apr 29, 2010 at 1:35 PM, Ben Greenfield <bcg at struxural.com> wrote:
> > If you subscribe to the professional feed of Nessus, you gain access
> > to the compliance and audit capabilities.
> >
> > You can easily modify the pre-written audit files to search for files
> > or content that you specify.  Tenable has already provided a huge
> > number of audit policies which can be used to search for all kinds of
> > sensitive information.
> >
> > I've had a lot of success using these audit policies to search for PHI
> > data leakage for my clients.  The reporting is OK and the scripts are
> > easy to modify.
> >
> > Here's a semi-generic link talking about some of the capabilities of
> Nessus:
> >
> http://www.nessus.org/products/professional-feed/index.php?view=compliance_checks
> > On Thu, Apr 29, 2010 at 11:41 AM, Shane Kelly <i0null at nightcoder.org>
> wrote:
> > > Hey Guys,
> > >
> > > I have a client that wants to search for certain files across their
> entire
> > > domain.  I am guessing it would be possible to create script to login to
> > > each machine with a domain administrator account and look for a file
> > > matching the relevant filename and/or checksum. I'm wondering if you
> anyone
> > > had done this before, or could recommend any software can do this? I
> know
> > > there is DLP software that can do this, but at this stage that would be
> > > massively overkill.
> > >
> > > Many thanks,
> > > Shane
> > >
> > > _______________________________________________
> > > Pauldotcom mailing list
> > > Pauldotcom at mail.pauldotcom.com
> > > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > > Main Web Site: http://pauldotcom.com
> >
> >
> >
> > --
> > --
> > Benjamin C. Greenfield, CISSP
> >
> > bcg [at] struxural.com
> >
> > Domains and Hosting for Less from Struxural:
> > http://www.struxural.com
> > _______________________________________________
> > Pauldotcom mailing list
> > Pauldotcom at mail.pauldotcom.com
> > http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> > Main Web Site: http://pauldotcom.com
> _______________________________________________
> Pauldotcom mailing list
> Pauldotcom at mail.pauldotcom.com
> http://mail.pauldotcom.com/cgi-bin/mailman/listinfo/pauldotcom
> Main Web Site: http://pauldotcom.com
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mail.pauldotcom.com/pipermail/pauldotcom/attachments/20100603/47cf094e/attachment.htm