windows xp run audit_windows.vbs

 
1
0
-1

openaudit 3.3.4
windows xp run audit_windows.vbs without data
Is there no support or need to modify the settings

    CommentAdd your comment...

    2 answers

    1.  
      1
      0
      -1

      Edit audit_windows.vbs. Replace line 3477 with the below.

      			if (cint(windows_build_number) > 6001) then
				set userItems = objWMIService.ExecQuery ("Select * from Win32_UserProfile Where SID = '" & objItem.SID & "'",,32)
			else
				set userItems = null
			end if

      Test if it works on XP, then on a later version of Windows. If it's all good, I'll add it for next release.

      Mark.

      1. tac tac

        Not sure if it is correct as shown below

        The following error occurs when debugging=5

        ---------------------------------------------------------------

        print queue info
        environment variables
        logs
        pagefile
        local users info
        D:\wxp_sp4\audit340_win_tx.vbs(3480, 5) Microsoft VBScript runtime error: here
        Object needed:'Null'

        ----------------------------------------------------------------

        Replace the 3477 line icon

      2. Mark Unwin

        Try changing 

        set userItems = null

        to

        userItems = null
      3. tac tac

        After confirming the modification, the execution is normal
        WindowsXP normal loading display

        thank

      4. Mark Unwin

        Great, thanks for helping. I'll add it to the code for our next release.

      CommentAdd your comment...
    2.  
      1
      0
      -1

      I do not know.

      I do not have a Windows XP machine to test with.

      I'd suggest running with debugging=5 and see what happens.

      1. tac tac

        Corrected version 3.4.0

      2. tac tac

        starting audit - .
        ----------------------------
        Open-AudIT Windows audit script
        Version: 3.4.0
        ----------------------------
        audit_dns y
        audit_mount_point y
        audit_netstat s
        audit_software y
        create_file y
        debugging 5
        details_to_lower y
        discovery_id
        hide_audit_window n
        ldap
        org_id 22
        ping_target y
        self_delete n
        strcomputer .
        strpass
        struser
        submit_online y
        system_id
        url http://192.168.1.118/open-audit/index.php/input/devices
        use_proxy n
        use_active_directory y
        windows_user_work_1 physicalDeliveryOfficeName
        windows_user_work_2 company
        -------------------
        LocalNet: 192.168.35.211 V128WINXPTX .
        Target: .
        Match: Auditing localhost.
        Disregarding ping_target because we're auditing localhost.
        My PID is 3328
        Audit Start Time 2020-08-25 16:08:32
        Audit Location local
        -------------------
        system info
        Get IP Adress of adapter with default route
        windows info
        Windows User: stest@abc.com
        policy info
        bios info
        scsi info
        processor info
        memory info
        motherboard info
        optical info
        video info
        registry monitor info
        Nothing in arSubKeys
        sound info
        disk info
        partition info
        shares info
        network card info
        network address info
        DNS info
        IPEnabled adapter without DHCP enabled
        Description: VMware Accelerated AMD PCNet Adapter - Teefer2 Minipor
        MACAddress: 00:50:56:9D:28:E9
        IPAddress: 192.168.35.211
        IPSubnet: 255.255.248.0
        Hostname:
        DNS Full Name:
        DNS IP Address:
        print queue info
        environment variables
        logs
        pagefile
        local users info
        D:\wxp_sp4\audit340_win_tp_tx.vbs(3477, 13) SWbemServicesEx: invalid category

      CommentAdd your comment...