security , visio-stencils

Collecting and Assessing OS Details

July 30, 2020

To obtain a detailed list of various components of operating systems, including firmware information, follow the procedure outlined below. Instructions are provided for Microsoft Windows, Linux (including the most common distributions), and VMware.

Please ensure that the output produced by the various utilities and commands is captured using plain text formatted (.txt) files. For consistency, you may name these files using the hostname of the device and the data they contain; for example:

“hostdev1-os-info.txt”

And

“hostdev1-sw-info.txt”

Windows Operating System Inventory

Microsoft Windows operating systems (all currently supported versions)

  1. Using local administrative rights, access the Microsoft Windows desktop interface
  2. From the command prompt, launch the MSINFO32.EXE utility
  3. Select File + Export from the main menu
  4. Save the file in text format

LINUX based systems

  1. Access the root prompt
  2. Enter the uname –a > filename or uname –mrs > hostname-os-info.txt commands, where filename denotes the output file
  3. You may also obtain similar information by using dmesg > hostname-os-info.txt where filename denotes the output file

VMWare based systems

  1. Access the VMWare service console
  2. At the root prompt, enter vmware –vl
  3. You may redirect the output of the above command as follows: vmware –vl > hostname-os-info.txt

Software Inventory

Microsoft Windows based devices (all currently supported versions)

  1. Access the Microsoft Windows desktop interface
  2. Run the PowerShell command interface (Start + Accessories + System Tools + PowerShell)
  3. At the PowerShell prompt, type wmic

Get Windows System Information via WMI Command-line (WMIC) | Lisenet.com :: Linux | Security | Networking

LINUX based devices

  1. CentOS – At the root prompt, type the following command: rpm –qa | less > hostname-sw-info.txt
  2. Debian – At the root prompt, type the following command: dkpg –get-selections > hostname-sw-info.txt
  3. Ubuntu – At the root prompt, type the following command: sudo dpkg—get-selections > hostname-sw-info.txt
  4. Free BSD – At the root prompt, type the following command: pkg_version | less > hostname-sw-info.txt
  5. OpenBSD – At the root prompt, type the following command: pkg_version | less > hostname-sw-info.txt

Services running on LINUX based devices

  • At the root prompt, enter service –list –all > hostname-proc-info.txt

Active ports and protocols running on a LINUX/Microsoft Windows based device

  • At the root/command prompt, enter netstat –a > hostname-ports-info.txt

Active processes running on a LINUX based device

  • At the root prompt, enter ps –a > hostname-procs-info.txt