How to detect what software signatures need to be defined

Document ID : KB000044110
Last Modified Date : 14/02/2018
Show Technical Document Details

Introduction/Summary: 

To identify the applications that are installed within the company, a signature scan is the preferred way to run on the installed agents. However the signature scan depends on the signatures present in the definitions file.
How to detect applications that are installed on any agents for which no signature exists?

Environment:  

Client Automation with enabled AM agent plugin on Windows computers

Instructions: 

The signature scan can be configured to report on unknown executable files that do not match any signature. It is time consuming but it will give you a list of applications that need signatures to be written for.

Capture.JPG

 

 

 

Or you can run a heuristic scan, report on it, create signatures for the packages that do not have a corresponding signature. When done, delete the heuristic definitions from Software Definitions as well as the heuristic collect task.