Skip to content
Permalink
Branch: master
Find file Copy path
Find file Copy path
Fetching contributors…
Cannot retrieve contributors at this time
18 lines (16 sloc) 2.54 KB
<?xml version="1.0" encoding="UTF-8"?>
<BES xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="BES.xsd">
<Analysis>
<Title>Applications - Windows</Title>
<Description><![CDATA[Application Inventory for Windows
<P>For general information or to report issues with C3 Inventory content please visit GitHub here: <A href="https://github.com/strawgate/C3-Inventory">https://github.com/strawgate/C3-Inventory</A></P>]]></Description>
<Relevance>windows of operating system</Relevance>
<Source>Internal</Source>
<SourceReleaseDate>2016-05-07</SourceReleaseDate>
<Domain>BESC</Domain>
<Property Name="Applications - Installed - Windows" ID="1" EvaluationPeriod="P1D">unique values of (it as string) of (value "DisplayName" of it as string as trimmed string, (value "DisplayVersion" of it as string | "None")) of keys whose (exists value "DisplayName" of it) of keys "HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall" of (if x64 of operating system then (x64 registry;x32 registry) else x32 registry)</Property>
<Property Name="Applications - Uninstall Strings - Windows" ID="2" EvaluationPeriod="P1D">unique values of (concatenations of (it as string)) of (value "DisplayName" of it as string | "N\A", value "UninstallString" of it as string | "N\A") of (keys of keys "HKLM\software\microsoft\windows\currentversion\uninstall" of ( x32 registry; (if exists x64 registry then x64 registry else nothing) )) whose ((exists (it) and it as string does not contain "Oarpmany.exe") of value "UninstallString" of it)</Property>
<Property Name="Applications - Silent Uninstall Strings - Windows" ID="3" EvaluationPeriod="P1D">unique values of (concatenations of (it as string)) of (value "DisplayName" of it as string | "N\A", value "QuietUninstallString" of it as string | "N\A") of (keys of keys "HKLM\software\microsoft\windows\currentversion\uninstall" of ( x32 registry; (if exists x64 registry then x64 registry else nothing) )) whose ((exists (it) and it as string does not contain "Oarpmany.exe") of value "QuietUninstallString" of it)</Property>
<Property Name="Applications - Startup - Windows" ID="4" EvaluationPeriod="P1D">unique values of (names of files whose (name of it does not contain ".ini") of folder "StartUp" of folder "Programs" of folder "Start Menu" of folder "Windows" of folder "Microsoft" of folder "ProgramData" of folder (name of drive of system folder));(it as string) of values of (key "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" of native registry)</Property>
</Analysis>
</BES>
You can’t perform that action at this time.