Three templates have been provided to list software installed on Windows, UNIX and Linux hosts. The sample above was cut from one of three chapters produced by the "Software Inventory" template and summarizes several unsupported software issues. To see a full report use the appropriate download example link.
- April 24th 2012, version 1, SecurityCenter 4.4
- Required Tools: Nessus
- Download Example - Software Inventory
- Download Example - Windows Software Inventory Export
- Download Example - UNIX and Linux Software Inventory Export
- Download Template - Software Inventory
- Download Template - Windows Software Inventory Export
- Download Template - UNIX and Linux Software Inventory Export
Nessus through credentialed scanning can enumerate software installed on hosts. If you are interested in reading more about this the Tenable blog post Enterprise Software Discovery with Nessus is a good source of information.
SecurityCenter uses the results from these two Nessus plugins, as mentioned in the blog post, to maintain an enterprise software inventory list:
The "Software Inventory" template produces a PDF report with three chapters. The "Windows Software Inventory" chapter lists the software installed on Windows hosts with installation counts. It also provides an initial list of the Windows hosts that were used to build its consolidated inventory list. The "UNIX/Linux Software Inventory" chapter follows the same structure but is for software installed on UNIX and Linux hosts. The "Unsupported Software" chapter is the final chapter and both summarizes and details unsupported software issues. An unsupported software issue reported by a Nessus plugin can be the result of multiple software versions installed on the same host and the chapter provides this level of detail, see the example below:
The "Windows Software Inventory Export" and "UNIX and Linux Software Inventory Export" templates provide an alternative to listing software inventory in a very large PDF document. They both use SecurityCenter's ability to produce a CSV file, instead of a PDF report, which can be opened in spreadsheet software for reviewing and searching. The examples provided for the templates are CSV files produced by running the templates.