Commands executed by Assets Discovery

SELECT * FROM Win32_Product

Get-ChildItem -Path 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\' | Select-Object PSChildName

for each software key:

Get-ItemProperty -Path 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{software}'

Get-ChildItem -Path 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall\' | Select-Object PSChildName

for each software key:

Get-ItemProperty -Path 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{software}'

SELECT * FROM Win32_SoftwareFeature

docker ps -a --format "{{.ID}}"

for each container:

docker inspect -f ""Name:{{println .Name}}" +
@"Image:{{println .Image}}" +
@"State:{{println .State.Status}}" +
@"Hostname:{{println .Config.Hostname}}"" + $containerId

docker stats --no-stream --format ""{{.MemUsage}}"" + $containerId

docker ps -a --format "{{.ID}}"

for each container:

docker inspect -f ""Name:{{println .Name}}" +
@"Image:{{println .Image}}" +
@"State:{{println .State.Status}}" +
@"Hostname:{{println .Config.Hostname}}"" + $containerId

docker stats --no-stream --format ""{{.MemUsage}}"" + $containerId

SELECT * FROM Win32_LogicalDisk WHERE DriveType = 3 or DriveType = 4

SELECT * FROM Win32_LogicalDiskToPartition

SELECT * FROM Win32_DiskDriveToDiskPartition

for all FileSystems:

SELECT * FROM Win32_DiskDrive WHERE DeviceID LIKE "%{deviceId}"

Get-WmiObject Win32_LogicalDisk | Where-Object {$_.DriveType -eq '3' -or $_.DriveType -eq '4'}

Get-WmiObject Win32_LogicalDiskToPartition

Get-WmiObject Win32_DiskDriveToDiskPartition

for all FileSystems:

Get-WmiObject Win32_DiskDrive | Where-Object {$_.DeviceID -match '{deviceId}'}

Windows_Hostinfo_ReferencedHosts.pat

Windows_Hostinfo_ReferencedHosts_PS.pat

SELECT * FROM Msvm_ComputerSystem

SELECT * FROM Msvm_SummaryInformation WHERE Name = '{0}'

Get-WmiObject -Namespace root\virtualization\v2 Msvm_ComputerSystem

Get-WmiObject -Namespace root\virtualization\v2 Msvm_SummaryInformation | Where-Object {$_.Name -eq 'vmID'}

SELECT * FROM Win32_NetworkAdapterConfiguration Where IPEnabled=true

SELECT * FROM Win32_OperatingSystem

Windows_OS.pat

Windows_Hostinfo_SystemUpTime.pat

Windows_OS_PS.pat

Windows_Hostinfo_SystemUpTime_PS.pat

SELECT * FROM Win32_QuickFixEngineering

SELECT * FROM Win32_DesktopMonitor

SELECT * FROM Win32_Printer

SELECT * FROM Win32_DiskDrive Where InterfaceType = "USB"

SELECT * FROM Win32_ComputerSystem

fallback command:

SELECT * from Win32_NetworkLoginProfile WHERE LastLogOn IS NOT NULL

Get-WmiObject Win32_ComputerSystem

fallback command:

Get-WmiObject Win32_NetworkLoginProfile | Where-Object {$_.LastLogon -ne $null}

SOFTWARE\Microsoft\Office

SOFTWARE\Wow6432Node\Microsoft\Office

for each key → sub value:

\Registration\DigitalProductID

Get-ChildItem -Path 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Office\' | Select-Object PSChildName

Get-ChildItem -Path 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\' | Select-Object PSChildName

for each key → sub value:

\Registration\DigitalProductID

WMIExecute

PowerShellExecute

Windows_Application_MSSQL-DBs.pat

Windows_Application_MSSQL-DBs_PS.pat

wmic logicaldisk where drivetype=3 get caption | findstr ":"

for all drives:

dir {drive}\psql.exe /s/b

for all found psql.exe files:

wmic logicaldisk where drivetype=3 get caption | findstr ":"

for all drives:

dir -path {drive}\ -r -filter psql.exe -ErrorAction SilentlyContinue | % fullname

for all found psql.exe files:

wmic logicaldisk where drivetype=3 get caption | findstr ":"

for all drives:

dir {drive}\pom.xml /s /b | findstr "atlassian.*-web"

for all found pom.xml files:

Windows_Application_Atlassian-JIRA.pat

Windows_Application_Atlassian-Confluence.pat

Windows_Application_Atlassian-Bamboo.pat

wmic logicaldisk where drivetype=3 get caption | findstr ":"

for all drives:

dir -path {drive}\ -r -filter pom.xml -ErrorAction SilentlyContinue | % fullname

for all found pom.xml files:

type '{pom.xml}' | findstr "parent version"

Windows_Application_Atlassian-JIRA_PS.pat

Windows_Application_Atlassian-Confluence_PS.pat

Windows_Application_Atlassian-Bamboo_PS.pat

wmic logicaldisk where drivetype=3 get caption | findstr ":"

for all drives:

dir {drive}\MANIFEST.MF /i | findstr "bitbucket"

for all found MANIFEST.MF files:

wmic logicaldisk where drivetype=3 get caption | findstr ":"

for all drives:

dir -path {drive}\ -r -filter MANIFEST.MF -ErrorAction SilentlyContinue | % fullname | findstr /i ""bitbucket"

for all found MANIFEST.MF files:

For the Atlassian Products reading the used database configuration:

dir {drive}\dbconfig.xml /s /b | findstr /i "<productName>"

for all found dbconfig.xml files:

type "{dbconfig}" | findstr "jdbc:"

Windows_Application_Atlassian-JIRA.pat

Windows_Application_Atlassian-Confluence.pat

Windows_Application_Atlassian-Bamboo.pat

Windows_Application_Atlassian-BitBucket.pat

For the Atlassian Products reading the used database configuration:

dir -path {drive}\ -r -filter dbconfig.xml -ErrorAction SilentlyContinue | % fullname | findstr /i "<productName>"

for all found dbconfig.xml files:

type "{dbconfig}" | findstr "jdbc:"

Windows_Application_Atlassian-JIRA_PS.pat

Windows_Application_Atlassian-Confluence_PS.pat

Windows_Application_Atlassian-Bamboo_PS.pat

Windows_Application_Atlassian-BitBucket_PS.pat

last | egrep 'tty|pts'

docker ps -a --no-trunc --format "{{.ID}} {{.Status}}"

for each container:

docker inspect -f ""Name:{{println .Name}}" +
@"Image:{{println .Image}}" +
@"State:{{println .State.Status}}" +
@"Hostname:{{println .Config.Hostname}}"" + $containerId

docker stats --no-stream --format ""{{.MemUsage}}"" + $containerId

hostname

OS check command:

uname -o -r -i -m && cat /etc/*release && lsb_release -a

For Solaris-Systems:

check-hostname | awk '{ print $NF }'

all other Linux-Systems:

hostname --fqdn

dmesg | grep -i 'hypervisor detected'

fallback command(s):

systemd-detect-virt

hostnamectl | grep -i 'virtualization'

sudo virt-what

netstat -tun

fallback command:

netstat -an

sudo dmidecode -t system | grep 'Serial Number'

uptime | sed -E 's/^[^,]*up *//; s/, *[[:digit:]]* users.*//; s/min/minutes/; s/([[:digit:]]+):0?([[:digit:]]+)/\1 hours, \2 minutes/'

fallback command:

cat /proc/uptime

sudo dmidecode -t system | grep 'Manufacturer'

fallback command:

cat /sys/class/dmi/id/sys_vendor

timedatectl | grep 'Time zone'

fallback command:

date '+%Z %z'

ifconfig -a

fallback command:

sudo ip addr show

Linux_NetworkInterfaces.pat

Linux_NetworkInterfaces.pat

Linux_NetworkInterfaces_IA.pat

VBoxManage list vms

for each vm:

VBoxManage showvminfo {0} --machinereadable

xe vm-list params=uuid is-control-domain=false is-a-snapshot=false --minimal

for each vm:

xe vm-list params=name-label uuid={1} --minimal

xe vm-list params=name-description uuid={1} --minimal

xe vm-list params=power-state uuid={1} --minimal

xe vm-list params=memory-static-maxe uuid={1} --minimal

xe vm-list params=networks uuid={1} --minimal

xe vm-list params=VCPUs-number uuid={1} --minimal

sudo service --status-all

sudo rc-status --all | grep -F '[''

sudo systemctl list-unit-files --type=service |  egrep 'enabled|disabled'

echo $$password$$ | sudo -S -u $$login$$ psql -c "\l+"

fallback command:

echo $$password$$ | sudo -S -u $$login$$ psql -h localhost -c "\l+"

sudo find / -iname "pom.xml" | grep 'atlassian.*-web'

for all found pom.xml files:

sed -n '/<parent>/,/<\/parent>/H; /<parent>/h; /\/parent/{x;s/<parent>\(.*[^\n]\)\n*<\/parent>/\1/p;}' {pom.xml}

Linux_Application_Atlassian-JIRA.pat

Linux_Application_Atlassian-Confluence.pat

Linux_Application_Atlassian-Bamboo.pat

sudo find / -iname "MANIFEST.MF" | grep 'bitbucket'

for all found MANIFEST.MF files:

For the Atlassian Products reading the used database configuration:

sudo find / -iname ""dbconfig.xml"" | grep '<productName>'

for all found dbconfig.xml files:

cat {dbconfig} | grep '<url>jdbc:'

Linux_Application_Atlassian-JIRA.pat

Linux_Application_Atlassian-Confluence.pat

Linux_Application_Atlassian-Bamboo.pat

Linux_Application_Atlassian-BitBucket.pat

IBM_DataPower_Hostinfo_ShowNetwork-Interface.pat

IBM_DataPower_Hostinfo_ShowVersion.pat