Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ASA_win_2.3.271 : Supported windows Platform - Collector Issues on Server 2012 #631

Open
sharmapriyanka134 opened this issue Jan 21, 2022 · 2 comments
Labels
bug Something isn't working

Comments

@sharmapriyanka134
Copy link

sharmapriyanka134 commented Jan 21, 2022

Describe the bug
Running ASA on windows2012 R2 but for various collects getting " Collector is not supported for this platform"

To Reproduce
Steps to reproduce the behavior:

  1. Go to '.. machine win 2012 R2.'
  2. Unzip latest ..ASA_win_2.3.271..'
  3. run >Asa.exe collect -a
  4. See error

C:\Surface_Analyzer\ASA_win_2.3.271\ASA_win_2.3.271>Asa.exe collect -a --runid b
eforeinstall
[12:15:41 INF] AttackSurfaceAnalyzer v.2.3.271+414d1d5683
[12:15:45 INF] Begin beforeinstall.
[12:15:45 INF] Starting 14 Collectors.
[12:15:50 INF] Starting FileSystemCollector.
[12:15:50 INF] Scanning root C:
[12:43:06 INF] Scanning root D:
[12:43:06 INF] Completed FileSystemCollector in 00h:27m:15s:819ms.
[12:43:06 INF] Starting OpenPortCollector.
[12:43:07 INF] Completed OpenPortCollector in 00h:00m:00s:981ms.
[12:43:07 INF] Starting ServiceCollector.
Screenshot 2022-01-21 at 5 28 48 PM
[12:43:11 INF] Completed ServiceCollector in 00h:00m:03s:712ms.
[12:43:11 INF] Starting UserAccountCollector.
[12:43:12 WRN] Microsoft.CST.AttackSurfaceAnalyzer.Collectors.UserAccountCollect
or isn't supported on this platform and failed to run. This won't impact results
for other collectors.

[12:43:12 INF] Completed UserAccountCollector in 00h:00m:00s:530ms.
[12:43:12 INF] Starting RegistryCollector.
[12:43:44 INF] Completed RegistryCollector in 00h:00m:32s:250ms.
[12:43:44 INF] Starting CertificateCollector.
[12:43:46 INF] Completed CertificateCollector in 00h:00m:02s:043ms.
[12:43:46 INF] Starting FirewallCollector.
[12:43:47 WRN] Microsoft.CST.AttackSurfaceAnalyzer.Collectors.FirewallCollector
isn't supported on this platform and failed to run. This won't impact results fo
r other collectors.

[12:43:47 INF] Completed FirewallCollector in 00h:00m:01s:227ms.
[12:43:47 INF] Starting ComObjectCollector.
[12:44:07 INF] Completed ComObjectCollector in 00h:00m:19s:915ms.
[12:44:08 INF] Starting EventLogCollector.
[12:44:56 INF] Completed EventLogCollector in 00h:00m:48s:064ms.
[12:44:56 INF] Starting TpmCollector.
[12:44:58 INF] Completed TpmCollector in 00h:00m:01s:834ms.
[12:44:58 INF] Starting CryptographicKeyCollector.
[12:44:58 INF] Completed CryptographicKeyCollector in 00h:00m:00s:012ms.
[12:44:58 INF] Starting ProcessCollector.
[12:45:09 INF] Completed ProcessCollector in 00h:00m:10s:141ms.
[12:45:09 INF] Starting DriverCollector.
[12:45:23 INF] Completed DriverCollector in 00h:00m:14s:596ms.
[12:45:24 INF] Starting WifiCollector.
[12:45:27 INF] Completed WifiCollector in 00h:00m:03s:025ms.

@sharmapriyanka134 sharmapriyanka134 added the bug Something isn't working label Jan 21, 2022
@sharmapriyanka134 sharmapriyanka134 changed the title ASA_win_2.3.271 : Supported windows plateform ASA_win_2.3.271 : Supported windows Platform Jan 21, 2022
@gfs
Copy link
Contributor

gfs commented Jan 21, 2022

Do you know if this is a regression? Did these collectors previously work on 2012? If so, what was the latest version you know works on 2012?

From examining the code, the firewall collector is likely running into this exception from the WindowsFirewallHelper library:

https://github.com/falahati/WindowsFirewallHelper/blob/3ff11894c12cc76ff1f769577a1ad1697882959f/WindowsFirewallHelper/FirewallManager.cs#L15-37

Similarly, The user account collector uses the System.Management library which I believe is the line throwing this there.

@gfs
Copy link
Contributor

gfs commented Jan 21, 2022

For the Service Collector it appears that the .NET Framework version you have installed on Windows is not new enough. Installing 4.8 might resolve the issues with the Service and User collector.

https://support.microsoft.com/en-us/topic/microsoft-net-framework-4-8-for-windows-server-2012-ffc7ea09-24e4-76ce-648f-290617580544

@gfs gfs changed the title ASA_win_2.3.271 : Supported windows Platform ASA_win_2.3.271 : Supported windows Platform - Collector Issues on Server 2012 Jan 21, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants