|
I'm at home right now so I can't post my script yet. When I get back to work I will post it in the morning (approx. 16 hours from now). It isn't very commented, so I'll throw some in there before I post.
Right now I can tell you that it:
-Tries to open (using redirect) an output file on a network share (the name is " <@WKSTA>"), and if that succeeds, it collects the values Class and DeviceDesc each third-layer key in HKLM\Enum such as HKLM\Enum\MONITOR\DEFAULT_MONITOR\0001. It then prints that information to the output file on the network share.
-Tries to make a directory in the network share named @WKSTA. Tries to open another output file (the name is " ") in this @WKSTA directory, and if that succeeds, it sees if VirusScan, ePolicy Orchestrator Agent, NetShield NT,Word, Excel, PowerPoint, Outlook, Access, MS Project, and Visio are installed (looks in registry for this). Gets version of each (getfileversion) of these programs if they exist, gets dat version of VirusScan (registry), and gets engine version of VirusScan (registry). Prints this data along with @WKSTA, @USERID, @TICKS, @IPADDRESS0, @ADDRESS, @DOMAIN, @TIME, @DATE, to this output file.
If the script is called for within the same second, then the script uses the same filename (since it's unique only by @WKSTA, @DATE, and @TIME macros). This data just gets appended to it, which isn't a big deal I don't think.
| 
