Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

An XML file named COMPUTERNAME_DATE.xml should be created. Close the terminal window. Remove the USB drive and go to a computer with Open-AudIT connectivity. Open the XML file and copy the XML and log in to the Open-AudIT web application and go to menu  -> Manage -> Devices -> Create Devices. You will see options for manually copying and pasting the file contents or uploading the file directly.

Computer not on the domain.

If you can see the computer on the network and it has it's firewall opened to allow remote WMI/VBscript, you can run the audit script using the remote credentials.

cscript audit_windows.vbs strcomputer=REMOTE_COMPUTER_NAME struser=REMOTE_DOMAIN/REMOTE_USERNAME strpass=REMOTE_PASSWORD

You may need to substitute the string "workgroup" or the remote computer name for REMOTE_DOMAIN above.

 

Flow questions for chart

Can you connect to the server from another server? Yes - Audit normally No - script?

...

Is your machine on the domain? Yes - normal No - script

Is this an air gapped network? Yes - script

 

...

- No normal

Is this an Active Directory discovery? Yes see link No - normal

Commands

cscript audit_windows.vbs . submit_online=n create_file=y - will run the audit on the local PC and output to a file (in the current directory). The "." can be used in place of the local machine name.

 

Other helpful resources

What Operating Systems will the audit scripts run on?

How to audit a subnet using a script

How to use Active Directory Discovery