funsec mailing list archives

RE: beneware?


From: "Richard M. Smith" <rms () computerbytesman com>
Date: Wed, 26 Oct 2005 13:25:22 -0400

If it were me, I would build the application as a .HTA program and use WMI
to gather these statistics.  The application can live on a Web server and
auto-run when Windows starts up using the mshta command.

Richard 

-----Original Message-----
From: Douglas F. Calvert [mailto:douglasfcalvert () gmail com] 
Sent: Wednesday, October 26, 2005 12:15 PM
To: Richard M. Smith
Cc: funsec () linuxbox org
Subject: Re: [funsec] beneware?

What I would really like to do is run a little app that collects a list of
running processes and the title of each window every x minutes. I am not
looking for a certain application, I am looking to see what the actual
application usage is...


On 10/26/05, Richard M. Smith <rms () computerbytesman com> wrote:
It's possible to scan for installed applications using a Web page if 
the locations are in a known location on the hard drive.  Here are a 
few demos of the technique:

http://www.computerbytesman.com/security/appscan.htm
http://www.computerbytesman.com/security/p2pscan.htm
http://www.computerbytesman.com/security/fingerprint.htm

This technique uses image files.  Another technique is to look for 
installed ActiveX controls.  One of the spyware sites does this.

Richard

-----Original Message-----
From: funsec-bounces () linuxbox org [mailto:funsec-bounces () linuxbox org] 
On Behalf Of Douglas F. Calvert
Sent: Wednesday, October 26, 2005 11:31 AM
To: funsec () linuxbox org
Subject: [funsec] beneware?

Hello,
 So dave has his nematodes, where is the beneware (like 
malware/spyware but gooder:)? Spyware would be a great way for IT 
departments to survey desktop application usage. Has anyone ever seen 
anything like this for data collection?
--
--dfc
douglasfcalvert () gmail com

_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.



--
--dfc
douglasfcalvert () gmail com
_______________________________________________
Fun and Misc security discussion for OT posts.
https://linuxbox.org/cgi-bin/mailman/listinfo/funsec
Note: funsec is a public and open mailing list.


Current thread: