Check state of third party antivirus software via registry? RRS feed

  • Frage

  • Hello,

    i am trying around to check the state of antivirus software, installed and running on windows server 2012 r2, with ossec.

    Is there a way to check the state of the software in the registry? Things i want to know are: signatures up to date, software running, software installed?

    Or is there a logfile of wmi containing some of this informations?

    I googled and found some approaches to check this things via vbscripts and powershell from wmi but i am not able to implement this in ossec.

    Best Regards and Thank you very much!

    Dienstag, 24. April 2018 12:18