Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
@@ -0,0 +1,28 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
BigFix Analysis Export

Title : AD OUs - Active Directory Info - Windows & Mac
ID : 2998380
Author : jgstew
Domain : BESC
Imported : 2016-08-31T12:38:10
Source : bigfixm1_main @ BES-Root
-->
<BES xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="BES.xsd">
<Analysis>
<Title>AD OUs - Active Directory Info - Windows &amp; Mac</Title>
<Description><![CDATA[&lt;enter a description of the analysis here&gt; ]]></Description>
<Relevance>exists active directories</Relevance>
<Relevance>exists dns domainnames of local computers of active directories</Relevance>
<MIMEField>
<Name>x-fixlet-modification-time</Name>
<Value>Thu, 11 Feb 2016 01:04:53 +0000</Value>
</MIMEField>
<Domain>BESC</Domain>
<Property ID="1" Name="Computer OU" EvaluationPeriod="PT1H">unique values of (concatenations &quot;:&quot; of substrings separated by &quot;,OU=&quot; of following text of first &quot;,OU=&quot; of preceding text of first &quot;,DC=&quot; of it) of (distinguished names of local computers of it) of active directory</Property>
<Property ID="2" Name="User OUs" EvaluationPeriod="PT1H">unique values of (concatenations &quot;:&quot; of substrings separated by &quot;,OU=&quot; of following text of first &quot;,OU=&quot; of preceding text of first &quot;,DC=&quot; of it) of (distinguished names of local users of it) of active directory</Property>
<Property ID="3" Name="AD domain" EvaluationPeriod="PT12H">unique values of dns domainnames of local computers of active directories</Property>
<Property ID="4" Name="Computer DN" EvaluationPeriod="PT12H">distinguished names of local computers of active directory</Property>
</Analysis>
</BES>
Original file line number Diff line number Diff line change
@@ -0,0 +1,24 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
BigFix Analysis Export

Title : Adapter Type
ID : 2994724
Author : sinucus
Domain : BESC
Imported : 2014-09-28T17:57:44
Source : bigfixm1_main @ BES-Root
-->
<BES xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="BES.xsd">
<Analysis>
<Title>Adapter Type</Title>
<Description><![CDATA[&lt;enter a description of the analysis here&gt; ]]></Description>
<Relevance>true</Relevance>
<MIMEField>
<Name>x-fixlet-modification-time</Name>
<Value>Thu, 14 Aug 2014 13:34:29 +0000</Value>
</MIMEField>
<Domain>BESC</Domain>
<Property ID="1" Name="Name">description of adapters of network</Property>
</Analysis>
</BES>
Original file line number Diff line number Diff line change
@@ -0,0 +1,44 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
BigFix Analysis Export

Title : Applicable Patch Listings
ID : 2994555
Author : JasonWalker
Domain : PTCH
Imported : 2013-08-06T10:09:53
Source : bigfixm1_main @ BES-Root
-->
<BES xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="BES.xsd">
<Analysis>
<Title>Applicable Patch Listings</Title>
<Description><![CDATA[<P>Sums the counts of applicable fixlets from multiple sites; currently "Enterprise Security" and "Updates for Windows Applications".</P>
<P>"Correctable" fixlets are defined as fixlets with a default action.&nbsp; Generally a fixlet with no default action is not correctable directly (for instance, it's simply a warning that an outdated product is present; or the correction requires a Microsoft support contract, etc.)</P>
<P>The individual breakdowns by Severity include "Correctable" fixlets only.</P>
<P>The list of relevant fixlets may be truncated by the maximum size of a result set.</P>
<P>This analysis works around two issues in the BigFix-provided data at the cost of some&nbsp;ugly relevance code:</P>
<OL>
<LI>Because there are variations in the Severity among the sites and even among fixlets within the site, uses a Regex to force severities to alphabetic characters only.&nbsp; For instance, some fixlets mark Severity as "N/A", others as "n.a."</LI>
<LI>Because a large number of fixlets fail to specify an "X-Fixlet-Type" value of "Fixlet", instead leaving it blank, this analysis looks for "X-Fixlet-Type" which are not a Baseline, Analysis, or Task.</LI></OL>
<P>This analysis should not be the only means of verifying your systems are up-to-date, but does provide a good overview.&nbsp; There are some valid security patches that do not have a Default Action, and thus would not be detected by this analysis.</P>
<P>Keywords: relevant, fixlet, patch, critical, important, moderate, low, regex, unique, distinct, multiplicity, sum, count, headers, site, X-Fixlet-Type, X-Fixlet-Default-Action, set of</P>]]></Description>
<Relevance>windows of operating system</Relevance>
<MIMEField>
<Name>x-fixlet-modification-time</Name>
<Value>Wed, 31 Jul 2013 17:20:40 +0000</Value>
</MIMEField>
<Domain>PTCH</Domain>
<Property ID="1" Name="Number of sites examined" EvaluationPeriod="P1D">number of sites whose (name of it is contained by set of (&quot;Enterprise Security&quot;;&quot;Updates for Windows Applications&quot;))</Property>
<Property ID="2" Name="Number of relevant fixlets" EvaluationPeriod="PT6H">number of relevant fixlets whose (not exists (headers &quot;X-Fixlet-Type&quot; of it) whose (value of it is contained by set of (&quot;Task&quot;;&quot;Analysis&quot;;&quot;Baseline&quot;))) of sites whose (name of it is contained by set of (&quot;Enterprise Security&quot;;&quot;Updates for Windows Applications&quot;))</Property>
<Property ID="3" Name="Number of correctable fixlets" EvaluationPeriod="PT6H">number of relevant fixlets whose (not exists (headers &quot;X-Fixlet-Type&quot; of it) whose (value of it is contained by set of (&quot;Task&quot;;&quot;Analysis&quot;;&quot;Baseline&quot;)) and exists headers &quot;X-Fixlet-Default-Action&quot; of it) of sites whose (name of it is contained by set of (&quot;Enterprise Security&quot;;&quot;Updates for Windows Applications&quot;))</Property>
<Property ID="4" Name="All relevant fixlets by severity" EvaluationPeriod="PT6H">concatenation &quot;; &quot; of (multiplicity of it as string &amp; &quot; &quot; &amp; it) of unique values of (concatenation &quot;&quot; of matches (regex &quot;[a-z]&quot;) of ( if exists headers &quot;X-Fixlet-Source-Severity&quot; of it then values of headers &quot;X-Fixlet-Source-Severity&quot; of it as lowercase else &quot;undefined&quot;)) of relevant fixlets whose (not exists (headers &quot;X-Fixlet-Type&quot; of it) whose (value of it is contained by set of (&quot;Task&quot;;&quot;Analysis&quot;;&quot;Baseline&quot;)) ) of sites whose (name of it is contained by set of (&quot;Enterprise Security&quot;;&quot;Updates for Windows Applications&quot;))</Property>
<Property ID="5" Name="Correctable fixlets by severity" EvaluationPeriod="PT6H">concatenation &quot;; &quot; of (multiplicity of it as string &amp; &quot; &quot; &amp; it) of unique values of (concatenation &quot;&quot; of matches (regex &quot;[a-z]&quot;) of ( if exists headers &quot;X-Fixlet-Source-Severity&quot; of it then values of headers &quot;X-Fixlet-Source-Severity&quot; of it as lowercase else &quot;undefined&quot;)) of relevant fixlets whose (not exists (headers &quot;X-Fixlet-Type&quot; of it) whose (value of it is contained by set of (&quot;Task&quot;;&quot;Analysis&quot;;&quot;Baseline&quot;)) and exists headers &quot;X-Fixlet-Default-Action&quot; of it) of sites whose (name of it is contained by set of (&quot;Enterprise Security&quot;;&quot;Updates for Windows Applications&quot;))</Property>
<Property ID="6" Name="Critical" EvaluationPeriod="PT6H">number of (concatenation &quot;&quot; of matches (regex &quot;[a-z]&quot;) of (values of headers &quot;X-Fixlet-Source-Severity&quot; of it as lowercase)) whose (it = &quot;critical&quot;) of relevant fixlets whose (not exists (headers &quot;X-Fixlet-Type&quot; of it) whose (value of it is contained by set of (&quot;Task&quot;;&quot;Analysis&quot;;&quot;Baseline&quot;)) and exists headers &quot;X-Fixlet-Default-Action&quot; of it) of sites whose (name of it is contained by set of (&quot;Enterprise Security&quot;;&quot;Updates for Windows Applications&quot;))</Property>
<Property ID="12" Name="High" EvaluationPeriod="PT6H">number of (concatenation &quot;&quot; of matches (regex &quot;[a-z]&quot;) of (values of headers &quot;X-Fixlet-Source-Severity&quot; of it as lowercase)) whose (it = &quot;high&quot;) of relevant fixlets whose (not exists (headers &quot;X-Fixlet-Type&quot; of it) whose (value of it is contained by set of (&quot;Task&quot;;&quot;Analysis&quot;;&quot;Baseline&quot;)) and exists headers &quot;X-Fixlet-Default-Action&quot; of it) of sites whose (name of it is contained by set of (&quot;Enterprise Security&quot;;&quot;Updates for Windows Applications&quot;))</Property>
<Property ID="14" Name="Important" EvaluationPeriod="PT6H">number of (concatenation &quot;&quot; of matches (regex &quot;[a-z]&quot;) of (values of headers &quot;X-Fixlet-Source-Severity&quot; of it as lowercase)) whose (it = &quot;important&quot;) of relevant fixlets whose (not exists (headers &quot;X-Fixlet-Type&quot; of it) whose (value of it is contained by set of (&quot;Task&quot;;&quot;Analysis&quot;;&quot;Baseline&quot;)) and exists headers &quot;X-Fixlet-Default-Action&quot; of it) of sites whose (name of it is contained by set of (&quot;Enterprise Security&quot;;&quot;Updates for Windows Applications&quot;))</Property>
<Property ID="15" Name="Moderate" EvaluationPeriod="PT6H">number of (concatenation &quot;&quot; of matches (regex &quot;[a-z]&quot;) of (values of headers &quot;X-Fixlet-Source-Severity&quot; of it as lowercase)) whose (it = &quot;moderate&quot;) of relevant fixlets whose (not exists (headers &quot;X-Fixlet-Type&quot; of it) whose (value of it is contained by set of (&quot;Task&quot;;&quot;Analysis&quot;;&quot;Baseline&quot;)) and exists headers &quot;X-Fixlet-Default-Action&quot; of it) of sites whose (name of it is contained by set of (&quot;Enterprise Security&quot;;&quot;Updates for Windows Applications&quot;))</Property>
<Property ID="16" Name="Low" EvaluationPeriod="PT6H">number of (concatenation &quot;&quot; of matches (regex &quot;[a-z]&quot;) of (values of headers &quot;X-Fixlet-Source-Severity&quot; of it as lowercase)) whose (it = &quot;low&quot;) of relevant fixlets whose (not exists (headers &quot;X-Fixlet-Type&quot; of it) whose (value of it is contained by set of (&quot;Task&quot;;&quot;Analysis&quot;;&quot;Baseline&quot;)) and exists headers &quot;X-Fixlet-Default-Action&quot; of it) of sites whose (name of it is contained by set of (&quot;Enterprise Security&quot;;&quot;Updates for Windows Applications&quot;))</Property>
<Property ID="18" Name="Unspecified" EvaluationPeriod="PT6H">number of (concatenation &quot;&quot; of matches (regex &quot;[a-z]&quot;) of ((if exists it then values of it as lowercase else &quot;unspecified&quot;) of headers &quot;X-Fixlet-Source-Severity&quot; of it)) whose (it is contained by set of (&quot;na&quot;;&quot;&quot;;&quot;unspecified&quot;;&quot;undefined&quot;)) of relevant fixlets whose (not exists (headers &quot;X-Fixlet-Type&quot; of it) whose (value of it is contained by set of (&quot;Task&quot;;&quot;Analysis&quot;;&quot;Baseline&quot;)) and exists headers &quot;X-Fixlet-Default-Action&quot; of it) of sites whose (name of it is contained by set of (&quot;Enterprise Security&quot;;&quot;Updates for Windows Applications&quot;))</Property>
<Property ID="19" Name="Names of relevant fixlets" EvaluationPeriod="PT6H">(id of it as string &amp; &quot; &quot; &amp; ((first 40 of it &amp; &quot;...&quot; &amp; last 15 of it) of (value of header &quot;Subject&quot; of it) | &quot;&quot;) as string) of relevant fixlets whose (not exists (headers &quot;X-Fixlet-Type&quot; of it) whose (value of it is contained by set of (&quot;Task&quot;;&quot;Analysis&quot;;&quot;Baseline&quot;)) and exists headers &quot;X-Fixlet-Default-Action&quot; of it) of sites whose (name of it is contained by set of (&quot;Enterprise Security&quot;;&quot;Updates for Windows Applications&quot;))</Property>
</Analysis>
</BES>
Original file line number Diff line number Diff line change
@@ -0,0 +1,30 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
BigFix Analysis Export

Title : Archive Manager Settings
ID : 7
Author : danielheth
Domain : BES
Imported : 2012-10-17T09:32:22
Source : bigfixm1_main @ BES-Root
-->
<BES xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="BES.xsd">
<Analysis>
<Title>Archive Manager Settings</Title>
<Description><![CDATA[<P>Analysis which pulls back all of the Archive Manager related settings so we can confirm all is working correctly.</P>
<P>NOTE:&nbsp; See <A href="http://support.bigfix.com/product/documents/Upload_Archive_Manager_80_101211.pdf">http://support.bigfix.com/product/documents/Upload_Archive_Manager_80_101211.pdf</A> for more details.</P>]]></Description>
<Relevance>true</Relevance>
<MIMEField>
<Name>x-fixlet-modification-time</Name>
<Value>Mon, 01 Oct 2012 21:31:03 +0000</Value>
</MIMEField>
<Domain>BES </Domain>
<Property ID="1" Name="Operating Mode" EvaluationPeriod="P1D">if exists setting &quot;_BESClient_ArchiveManager_OperatingMode&quot; of client then value of setting &quot;_BESClient_ArchiveManager_OperatingMode&quot; of client as string else &quot;&quot;</Property>
<Property ID="2" Name="Send All" EvaluationPeriod="P1D">if exists setting &quot;_BESClient_ArchiveManager_SendAll&quot; of client then value of setting &quot;_BESClient_ArchiveManager_SendAll&quot; of client as string else &quot;&quot;</Property>
<Property ID="3" Name="Max Archive Size" EvaluationPeriod="P1D">if exists setting &quot;_BESClient_ArchiveManager_MaxArchiveSize&quot; of client then value of setting &quot;_BESClient_ArchiveManager_MaxArchiveSize&quot; of client as string else &quot;&quot;</Property>
<Property ID="4" Name="Interval Seconds" EvaluationPeriod="P1D">if exists setting &quot;_BESClient_ArchiveManager_IntervalSeconds&quot; of client then value of setting &quot;_BESClient_ArchiveManager_IntervalSeconds&quot; of client as string else &quot;&quot;</Property>
<Property ID="5" Name="Last Archive" EvaluationPeriod="P1D">if exists setting &quot;_BESClient_ArchiveManager_LastArchive&quot; of client then value of setting &quot;_BESClient_ArchiveManager_LastArchive&quot; of client as string else &quot;&quot;</Property>
<Property ID="6" Name="Last Interval Number" EvaluationPeriod="PT15M">if exists setting &quot;_BESClient_ArchiveManager_LastIntervalNumber&quot; of client then value of setting &quot;_BESClient_ArchiveManager_LastIntervalNumber&quot; of client as string else &quot;&quot;</Property>
</Analysis>
</BES>
Original file line number Diff line number Diff line change
@@ -0,0 +1,35 @@
<?xml version="1.0" encoding="UTF-8"?>
<!--
BigFix Analysis Export

Title : BES Client Health Checks (All OSs)
ID : 2994550
Author : danielheth
Domain : BESC
Imported : 2013-07-18T21:33:02
Source : bigfixm1_main @ BES-Root
-->
<BES xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:noNamespaceSchemaLocation="BES.xsd">
<Analysis>
<Title>BES Client Health Checks (All OSs)</Title>
<Description><![CDATA[<P>This is a multiple OS version of jgstews <A href="http://bigfix.me/cdb/analysis/88">http://bigfix.me/cdb/analysis/88</A></P>
<P>Collect some data about the BES Client settings &amp; performance. This is a work in progress and will likely be expanded.</P>
<P>Note:&nbsp; Removed the "data folder of client" which only works in v9, in favor of the older "parent folder of&nbsp;client folder of current site" so it will work with v8.2 deployments.</P>]]></Description>
<Relevance>if exists property &quot;in proxy agent context&quot; then ( not in proxy agent context ) else true</Relevance>
<MIMEField>
<Name>x-fixlet-modification-time</Name>
<Value>Fri, 19 Jul 2013 04:31:40 +0000</Value>
</MIMEField>
<Domain>BESC</Domain>
<Property ID="5" Name="Evaluation Loop Average" EvaluationPeriod="PT6H">less significance 3 of (average of evaluationcycle of client as floating point / 1000 / 60)</Property>
<Property ID="3" Name="Start type of BESClient" EvaluationPeriod="P1D">if windows of operating system then start type of service &quot;BESClient&quot; as string else &quot;&lt;N/A&gt;&quot;</Property>
<Property ID="4" Name="DelayedAutoStart" EvaluationPeriod="P1D">if windows of operating system then (value &quot;DelayedAutoStart&quot; of key &quot;HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\BESClient&quot; of registry) as string else &quot;&lt;N/A&gt;&quot;</Property>
<Property ID="6" Name="Evaluation Cycle Maximum" EvaluationPeriod="PT6H">((maximum of it /1000* second)/minute) of evaluationcycle of client</Property>
<Property ID="8" Name="Download Cache Limit (MB)" EvaluationPeriod="PT6H">if (not exists setting &quot;_BESClient_Download_DownloadsCacheLimitMB&quot; of client) then ERROR &quot;not set&quot; else (value of setting &quot;_BESClient_Download_DownloadsCacheLimitMB&quot; of client)</Property>
<Property ID="9" Name="Utility Cache Limit (MB)" EvaluationPeriod="PT6H">if (not exists setting &quot;_BESClient_Download_UtilitiesCacheLimitMB&quot; of client) then ERROR &quot;not set&quot; else (value of setting &quot;_BESClient_Download_UtilitiesCacheLimitMB&quot; of client)</Property>
<Property ID="10" Name="CommandPollInterval" EvaluationPeriod="PT6H">if(not exists setting &quot;_BESClient_Comm_CommandPollEnable&quot; whose(value of it = &quot;1&quot;) of client) then ERROR &quot;disabled&quot; else (if(not exists setting &quot;_BESClient_Comm_CommandPollIntervalSeconds&quot; of client) then ERROR &quot;not set&quot; else (value of setting &quot;_BESClient_Comm_CommandPollIntervalSeconds&quot; of client))</Property>
<Property ID="1" Name="Download Cache Size (MB)" EvaluationPeriod="PT12H">(sum of sizes of descendants of folder ((pathname of parent folder of client folder of current site) &amp; &quot;/__Global/__Cache/Downloads&quot;)) / (1024*1024)</Property>
<Property ID="2" Name="Utility Cache Size (MB)" EvaluationPeriod="PT12H">(sum of sizes of descendants of folder ((pathname of parent folder of client folder of current site) &amp; &quot;/__Global/__Cache/Utilities&quot;)) / (1024*1024)</Property>
<Property ID="7" Name="Log&amp;History Size (MB)" EvaluationPeriod="PT12H">(( (if number of files whose(name of it ends with &quot;.log&quot;) of it &gt; 0 then sum of sizes of files whose(name of it ends with &quot;.log&quot;) of it else 0) + (if number of files whose(name of it ends with &quot;.log&quot;) of folder &quot;__Global\Logs&quot; of it &gt; 0 then sum of sizes of files whose(name of it ends with &quot;.log&quot;) of folder &quot;__Global\Logs&quot; of it else 0) + (if number of files whose(name of it ends with &quot;History.db&quot;) of folder &quot;__Global&quot; of it &gt; 0 then sum of sizes of files whose(name of it ends with &quot;History.db&quot;) of folder &quot;__Global&quot; of it else 0) ) of (parent folder of client folder of current site)) / (1024 * 1024)</Property>
</Analysis>
</BES>
Loading
Loading