Kaseya Community

AUDITING

  • To DO:

    * Service Detection & Tests
    - IIS
    --Default Directories
    -- IIS Lockdown
    - TErminal Server License Service (TSMODE)
    - SQL & MSDE
    -- DB Paths
    -- Log Sizes
    -- Last backup
    -- SA Password
    -- SQL Patches (Use Kaseya)
    - Exchange
    -- Relay Tests (Run a automated Telnet script to test for "Open Relay")
    -- AntiVirus
    -- Exchange Patches (Use Kaseya)
    -- DB Sizes
    - SharePoint
    - DNS
    -- Forwarders, Maybe a list of domains hosted.
    - DHCP
    -- Scope Detection
    -- Toumbstoned IP's
    -- COnflicting IP's
    -- Exclusions
    - WINS

    * Anti-Virus Detection & Tests
    - AntiVirus (Use Kaseya Audit Data)
    Norton
    McAfee
    Etc..
    (Maybe just see if we can find the name Anti_Virus or use windows detction of this)
    - Check Current Deffs (Have some scripts already)
    - Check if any scans have run
    - Check Event logs for the last 30 days of Viral activity

    * Local & Domain Computer policies
    - Strong Account Policies (Password change 30 days etc.)
    - AD Detection _ Name etc. (Easy Script)
    - Is Guest Account enabled (Easy Net use command)

    * Network Tests
    - Shares Enabled
    - Security On Shares (what accounts/ Groups)

    * Workstation Tests
    Sum up things we already know
    - Patches total missing
    - Spyware Scan only # of total Spycount (have adaware vb script upload from agent to SQL Table)
    - Bad Applications test (Search for a list of known P2P, Tool Bars, etc.)





    Legacy Forum Name: Script Discussion,
    Legacy Posted By Username: sourceminer
  • I will go feed this to the programmers. Lets see what they come up with.

    Gamer-X


    Legacy Forum Name: Script Discussion,
    Legacy Posted By Username: Gamer-X
  • so, how do you want this, in one master script or broken up into exes that can be used when the need arises???Big Smileude:

    Legacy Forum Name: Script Discussion,
    Legacy Posted By Username: hexeliebe
  • Well initially I thought we could run as seperate steps, But I think the benifit would be to build a single program and export to XML or multiple files.

    Legacy Forum Name: Script Discussion,
    Legacy Posted By Username: sourceminer
  • get_pst.zip
    Here is the answer to the PST problem. A simple VBS script that will return all the data in csv format. I have attached the kaseya script, vbs script and a screenshot of the report output.

    This can soon be modified for other file types.

    John


    Legacy Forum Name: Script Discussion,
    Legacy Posted By Username: jnuttall
  • Sourceminer... The word on the street is good progress is being made on this.

    Hopefully a couple more weeks or less till something shows up for initial comments.

    Gamer-X


    Legacy Forum Name: Script Discussion,
    Legacy Posted By Username: Gamer-X
  • ok... we have been working on this for a while now.

    I had a friend email me a tool over the weekend....
    All I have to say is NICE!!!!!

    it is free for non commercial use
    It is $75.00 per technician unlimited.
    It outputs in several formats...
    It runs command line "although not 100% invisible".

    For the auditing portion of the discussion here.... this comes damn close to covering it all.

    Now it does not scan for viruses... that was going to be a really tough one in the first place...although we are working on it.

    Here is the website...
    http://www.gtopala.com/



    I have seen similar tools before, but no one quite as easy to use as this and certainly not as flexible.

    This tool will be your new best friend. I guarantee it.



    enjoy... and please COMMENT on what you are doing for this project as well....

    Gamer-X


    Legacy Forum Name: Script Discussion,
    Legacy Posted By Username: Gamer-X
  • This is an audit program I have been using for a long time. It is CLI compatible and "semi" invisible.

    Here is a link to my original post and script for this tool:

    http://www.kaseya.com/kforum/view_topic.php?id=1654&forum_id=15&highlight=audit

    and the tool can be found here:

    http://www.pxserver.com/WinAudit.htm

    This tool is 100% free.

    God Bless,

    Marty



    Legacy Forum Name: Script Discussion,
    Legacy Posted By Username: MissingLink
  • yes winaudit is nice.... but in my opinion, I like SIW better.

    It does more and is laid out a little better I think personally.
    It also makes better reports I think.

    SIW also has a lot more tools built into it.



    The cost is almost nothing, in my opinion, so I do not consider cost even a factor in the comparision chart.




    With all that said... winaudit is a good tool as well. It certainly deserves mention here.

    Gamer-X


    Legacy Forum Name: Script Discussion,
    Legacy Posted By Username: Gamer-X
  • Gamer-X



    Did this project die? We are new to Kaseya but have the ability to help if this is still going......


    Legacy Forum Name: Script Discussion,
    Legacy Posted By Username: iesolutions
  • My question is simple:

    Why doesn't Kaseya include all the information provided by a tool like WinAudit?

    It includes useful, simplethings that Kaseya doesn't:

    - Display properties (useful for laptops)

    - BIOS info

    - Accurate Serial Number (Kaseya displays an incorrect SN, WinAudit is accurate on my ThinkPad) - this is really importantfor calling vendor support without needing to physically see the machine

    - Accurately shows multiple network interface cards and their TCP/IP settings

    - More Accurate hard disk information (vendor is incorrect in Kaseya, correct in WinAudit and other details are more accurate as well)

    And so on...






    Legacy Forum Name: Script Discussion,
    Legacy Posted By Username: kentschu
  • How far did this project get before dying on the vine?

    I think using one of the free audit tools is nice for pulling hardware/software inventory data, but it will take something like Powershell scripting to dig under the hood and pull out things like Exchange, IIS & SQL configurations & data.

    Anyone up for restarting this?

    Jim


    Legacy Forum Name: Script Discussion,
    Legacy Posted By Username: jlancaster