Open-AudIT
https://www.open-audit.org/phpBB3/

Remote auditing a Windows computer from Linux
https://www.open-audit.org/phpBB3/viewtopic.php?f=20&t=5902		 Page 1 of 1
Author:  karl [ Tue Jul 17, 2012 8:40 am ]
Post subject:  Remote auditing a Windows computer from Linux
Hi, I'm looking to deploy OAv2 on the network here at work. Right now I'm just testing it out on my Linux box and with two Windows VM's. I can run the script, locally, on the VM's and have the audit report show up fine on my Linux box where OA is installed. I can even use SSH to run the audit from one VM on the other. However, I am unable to use SSH to run the audit on a VM from my Linux box - I just get this output:

[code]$ cscript audit_windows.vbs
Microsoft (R) Windows Script Host Version 5.8
Copyright (C) Microsoft Corporation. All rights reserved.

starting audit - .
C:\audit_windows.vbs(165, 1) (null): The specified module could not be found.
[/code]

I'm assuming this is because there are no (/I don't have) any WMI libraries on Linux, but maybe it's something else. I've opened up standard ports for SSH, so I think it's something other than that. I would appreciate any help.

Ideally, I would like to host OAv2 on Linux and have it audit both Windows and Linux machines on our network. The audit reports are excellent so I'm really looking forward to getting OA going proper.
Author:  Mark [ Tue Jul 17, 2012 10:33 am ]
Post subject:  Re: Remote auditing a Windows computer from Linux
Yeah - that ain't going to work :D

Your best bet right now is to simply run the audit_windows (and audit_domain, etc) from a Windows machine. You obviously have Windows machines or you wouldn't need to audit them :D

A goal is to get this working by running a script on a Linux machine, have it copy the audit_windows to a windows machine, then remotely start it. It's been discussed here before. To be honest, it's not at the top of the list when you consider you can simply run the script on windows anyway... sorry. But hey, if you want to code up a script on Linux that will do this, I'm only too happy to take a llook and possibly use it in OAv2 :)
Page 1 of 1 All times are UTC + 10 hours
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/