This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
Register Now
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
NetWitness Discussions

How can i get a list of installed programs from a windows host running EDR v12.1.0?

Anonymous
Not applicable

‎2023-02-09 03:30 AM

Bharath_0-1675931290085.png

Currently under system info i can see windows patch details and other system info but i couldn't find a way to list programs and apps installed on a host.  

0 Likes
1 REPLY 1

JohnKisner
Valued Contributor Valued Contributor
Valued Contributor

‎2023-10-25 05:52 PM

Bharath,

 

Based on what I am being told there is no way to get the agent to request a list of installed applications. The only thing you can possibly get is if an application creates a log or not. If it does then you should be able to see the log and know it is installed. What you are looking for is more in lines of a windows maintenance tool/application that can talk natively to windows. NetWitness's EDR agent is for processing logs and watching over the process space of the Windows device. Your use case is a little outside of the scope of NetWitness.

 

I hope this helps.

0 Likes
© 2022 RSA Security LLC or its affiliates. All rights reserved.