Based on what I am being told there is no way to get the agent to request a list of installed applications. The only thing you can possibly get is if an application creates a log or not. If it does then you should be able to see the log and know it is installed. What you are looking for is more in lines of a windows maintenance tool/application that can talk natively to windows. NetWitness's EDR agent is for processing logs and watching over the process space of the Windows device. Your use case is a little outside of the scope of NetWitness.