Open-AudIT
https://www.open-audit.org/phpBB3/

Exclusion or inclusion of attributes on inventory
https://www.open-audit.org/phpBB3/viewtopic.php?f=20&t=6506
Page 1 of 1

Author:  saep [ Sat Feb 06, 2016 5:04 am ]
Post subject:  Exclusion or inclusion of attributes on inventory

Hi.

The hardware and software inventories are already very completed (version 1.8.2). We don´t need some of attributes for any of our devices (for example bios details). On the other hand, we would like to insert others attributes, especially, for example, (1) the date that the antivirus's signature was last updated and (2) the date that the Windows was last updated. So I have 2 questions:

1) Is it possible to exclude and include attributes on the inventory? As we have some offline devices, this customization needs to be valid for online and offline (manual script's execution + manual load of the XMLs) inventory.

2) Is it possible to include on the inventory (1) the date that the antivirus's signature was last updated and (2) the date that the Windows was last updated? What do we need to customize? Does anybody have a template or example?

Thanks

Author:  saep [ Fri Feb 12, 2016 10:56 pm ]
Post subject:  Re: Exclusion or inclusion of attributes on inventory

Hi.

Mark and moderators, could you help me? Please.

These questions are very important to our avaliation. I think that the open-AudIT is a wonderfull tool, but I need to "sell-it" to my team and manager ; - ))

I have tried to find the answers but I haven't found them.

Regards

Author:  Mark [ Mon Feb 15, 2016 1:46 pm ]
Post subject:  Re: Exclusion or inclusion of attributes on inventory

There are "some" items you can exclude. See the audit_windows.vbs script and the variables for skip_software, skip_printer, skip_mount_point, skip_dns. We could always add more. Just set these in the actual script on disk and they'll be used (or not). Is there an issue collecting everything?

For Last Windows Update we can grab the value from HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\WindowsUpdate\Auto Update\Results\Install and the key LastSuccessTime and store that easily enough. We will need somewhere to store it, so a new DB column, hence a schema upgrade, hence a new release. File changes required on openaudit_mysql.sql, admin.php, audit_windows.vbs and display_inc_summary.php.

Last AV Update would be (I suspect) heavily program dependant. IE - Symantec will likely be different to Avast. Can you tell us which AV software you're using?

Page 1 of 1 All times are UTC + 10 hours
Powered by phpBB® Forum Software © phpBB Group
https://www.phpbb.com/