RE: Microsoft Software Auditing ?

• Previous message: Kelly Martin: "SF new article announcement: Defeating Honeypots: System Issues, Part 2"
• Maybe in reply to: Michael Gale: "Microsoft Software Auditing ?"
• Next in thread: Andrew Rogers: "Re: Microsoft Software Auditing ?"
• Reply: Andrew Rogers: "Re: Microsoft Software Auditing ?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

Date: Wed, 6 Apr 2005 17:21:58 -0400
To: "Charles Otstot" <charles.otstot@ncmail.net>, <security-basics@securityfocus.com>

I like pstools from www.sysinternals.com

Psinfo -s >> \\<SERVER>\<SHARE>\<filename>.txt

Want to know about hotfixes?

Psinfo -h >> blah..blah..blah..

Of course it only works on W2K and Up.

OR

If you only care about MS Products installed on MS machines use the MS
Software Inventory Analyzer:
http://www.microsoft.com/resources/sam/msia.mspx

-jmb

-----Original Message-----
From: Charles Otstot [mailto:charles.otstot@ncmail.net]
Sent: Tuesday, April 05, 2005 1:10 PM
To: security-basics@securityfocus.com
Subject: RE: Microsoft Software Auditing ?

-----Original Message-----
From: Robert Holtz [mailto:robert.d.holtz@gmail.com]
Sent: Tuesday, April 05, 2005 9:24 AM
To: Michael Gale
Cc: security-basics@securityfocus.com
Subject: Re: Microsoft Software Auditing ?

You could do something as simple as:

dir *.exe /s > foo.all.of.the.exe.files.txt

Assuming the box to be audited is a Windows system, this might not be a
simple task as the output on any given box would encompass several
hundred .exe's for OS files. This obviously doesn't include any
executables for end-user applications or other sources. The time to
script paring down the output and gathering any useful information would
probably be rather lengthy as one would have to identify whether xyz.exe
belongs to the OS, a vendor's OS build (if OEM), etc. Then once you get
rid of all the fluff that belongs on every box, you'll have to repeat
the same for each box audited to identify each of the executable files
and their sources, a potentially daunting task depending upon the number
of boxes, the number of different hardware configurations and the
complexity of installed applications.

On Apr 1, 2005 10:36 PM, Michael Gale <michael.gale@bluesuperman.com>
wrote:
> Hello,
>
> Does any body know of any free / cheap Microsoft auditing
> software
?
> Ideally I would like something that could be run from a login script,
> that would find all the software currently installed and either:
>
> store it in a network drive (excel, html,txt)
> e-mail the data
>
> I do not want to have to take out a loan to buy this software.
>
> preferably open source :)
>
> Michael
>
>
------------------------------------------------------------------------

---
> Earn your MS in Information Security ONLINE
> Organizations worldwide are in need of highly qualified information
security
> professionals.  Norwich University is fulfilling this demand with its 
> MS
in
> Information Security offered online.  Recognized by the NSA as an 
> academically excellent program, NU offers you the opportunity to earn 
> your degree without disrupting your home or work life.
> 
> http://www.msia.norwich.edu/secfocus_en
>
------------------------------------------------------------------------
----
> 
>
------------------------------------------------------------------------
---
Earn your MS in Information Security ONLINE
Organizations worldwide are in need of highly qualified information
security
professionals.  Norwich University is fulfilling this demand with its MS
in 
Information Security offered online.  Recognized by the NSA as an 
academically excellent program, NU offers you the opportunity to earn
your 
degree without disrupting your home or work life.
http://www.msia.norwich.edu/secfocus_en
------------------------------------------------------------------------
----
------------------------------------------------------------------------
---
Earn your MS in Information Security ONLINE
Organizations worldwide are in need of highly qualified information
security 
professionals.  Norwich University is fulfilling this demand with its MS
in 
Information Security offered online.  Recognized by the NSA as an 
academically excellent program, NU offers you the opportunity to earn
your 
degree without disrupting your home or work life.
http://www.msia.norwich.edu/secfocus_en
------------------------------------------------------------------------
----
---------------------------------------------------------------------------
Earn your MS in Information Security ONLINE
Organizations worldwide are in need of highly qualified information security 
professionals.  Norwich University is fulfilling this demand with its MS in 
Information Security offered online.  Recognized by the NSA as an 
academically excellent program, NU offers you the opportunity to earn your 
degree without disrupting your home or work life.
http://www.msia.norwich.edu/secfocus_en
----------------------------------------------------------------------------

• Previous message: Kelly Martin: "SF new article announcement: Defeating Honeypots: System Issues, Part 2"
• Maybe in reply to: Michael Gale: "Microsoft Software Auditing ?"
• Next in thread: Andrew Rogers: "Re: Microsoft Software Auditing ?"
• Reply: Andrew Rogers: "Re: Microsoft Software Auditing ?"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]