28. 09. 2018
Asset Management, NetEye
30. 10. 2014
Thomas Forrer
Asset Management, NetEye
OCS Inventory: Detect Software Installed at User Level
A new plugin for the OCS Inventory Agent allows to detect software installed at user level.
We recently faced the problem of needing to detect user level installations of software on Windows operating systems. To resolve this, we’ve developed a plugin for the OCS Inventory agent.
To shortly explain:
For instance some programs as DropBox and Chrome, can be installed at user level (don’t have to be installed globally within the operating system). This installations, until now, were not detected by standard OCS Inventory installation.
In order to fill this gap, we developed a Visual Basic plugin. To gather possible installations on every single users session the plugin reads specific registry entries for each user of the system.
The main challenge was to loop over every single registry in order to find the correct entries. This was only possible by using the SID list retrieved through the HKEY_USERS registry values.
You can download the Plugin from our Downloads Section. Once downloaded you have to simply put the VB script into the plugins directory of your OCS Inventory agent installations.
Thomas Forrer
Team Leader Research & Development at Würth Phoenix
Hi folks!
I began loving computer since 1994, it was still the time of windows 3.1. Immediately I learned starting DOS games from the command promt, and while typing some white text on black background I felt like some hackish dude in a hollywoodian movie.
Later during the studies at the university, I discovered the magic world of opensource, and it was love at first sight. Finally I got rid of BSOD's =)
I love everything that is connected to some network, especially in a security perspective.
My motto is:
"With motivation, nothing is impossibile. It only requires more time."
Author
Latest posts by Thomas Forrer
20. 09. 2021
ctf-writeups, SEC4U
RomHack CTF 2021: Table of Contents Writeup