Hard Drive Audit - Windows - superseded
Log In or Register to download the BES file, and more.

0 Votes

Versioning - This is an older version.

1Hard Drive Audit - Windows11/29/2012 10:26:19 AM
2Hard Drive Audit - windows12/10/2012 1:21:27 PM
3Hard Drive Audit - windows12/11/2012 7:40:03 AM
4Hard Drive Audit - windows1/18/2013 11:02:12 AM
5Hard Drive Audit - windows5/28/2013 10:41:22 AM
6Hard Drive Audit - windows6/4/2013 11:24:20 AM
7Hard Drive Audit - Windows6/28/2013 6:33:09 AM
8Hard Drive Audit - Windows12/6/2013 8:22:24 AM
9Hard Drive Audit - Windows8/8/2014 1:12:29 PM
10Hard Drive Audit - Windows8/15/2014 12:30:58 PM

Description

Gives many aspects of the system and system hard drive.

Property Details

ID47
TitleHard Drive Audit - Windows
DomainBESC
KeywordsHard Drive, Audit
Added by on 11/29/2012 10:26:19 AM
Last Modified by on 11/30/2012 7:43:13 AM
Counters 5843 Views / 3 Downloads
User Rating 1 star 2 star 3 star 4 star 5 star * Average over 0 ratings. ** Log In or Register to add your rating.

Properties

Total Used Space of System Drive
Period 6 hours
 
  * Results in a "string"/number
Show indented relevance
(((total space of drive of system folder)/(1024 * 1024 * 1024)) - ((free space of drive of system folder)/(1024 * 1024 * 1024))) as string & " GB"
Total Free Space of System Drive
Period 6 hours
 
  * Results in a "string"/number
Show indented relevance
((free space of drive of system folder)/(1024 * 1024 * 1024)) as string & " GB"
Windows.old?
Period 2 days
 
  * Results in a "string"/number
Show indented relevance
exists folder "C:\Windows.old"
Hard Drive Serial Numbers
Period 7 days
 
  * Results in a "string"/number
Show indented relevance
if (exists wmi) then (concatenation ", " of ((substrings after "=" of (property "SerialNumber" of it as string)) of select objects "* from win32_PhysicalMedia where SerialNumber != ''" of wmi) as string ) else "n/a"
PredictFailure?
Period 1 day
 
  * Results in a "string"/number
Show indented relevance
(string value of property "PredictFailure" of it & " - " & string value of property "InstanceName" of it) of select objects "* from MSStorageDriver_FailurePredictStatus" of wmi "root\WMI"
Partitions 4k aligned?
Period 1 day
 
  * Results in a "string"/number
Show indented relevance
not disjunction of ((following text of first "=" of (property "StartingOffset" of it as string) as integer mod 4096) != 0) of select objects "* from Win32_DiskPartition" of wmi
Partition Block Size
Period 2 days
 
  * Results in a "string"/number
Show indented relevance
concatenation "," of unique values of (following text of first "=" of (property "BlockSize" of it as string)) of select objects "* from Win32_DiskPartition" of wmi
Size of PageFile?
Period 1 day
 
  * Results in a "string"/number
Show indented relevance
((size of file "c:\pagefile.sys")/(1024 * 1024)) as string
Size of HiberFil?
Period 1 day
 
  * Results in a "string"/number
Show indented relevance
((size of file "c:\hiberfil.sys")/(1024 * 1024)) as string
Size of Dell folder?
Period 2 days
 
  * Results in a "string"/number
Show indented relevance
if exists (folder "dell" of drive of system folder) then ((sum of sizes of descendants of folder "dell" of drive of system folder) / (1024 * 1024)) as string else "<none>"
Drive Firmware
Period 7 days
 
  * Results in a "string"/number
Show indented relevance
if (exists wmi) then (concatenation "; " of ((string value of property "Model" of it, string value of property "FirmwareRevision" of it) of select objects "Model, FirmwareRevision from Win32_DiskDrive" of wmi as string)) else "n/a"

Relevance

isWindows (Relevance 1172)
Used in 1155 fixlets and 538 analyses   * Results in a true/false
Show indented relevance
windows of operating system
Used in 2 fixlets and 23 analyses   * Results in a true/false
Show indented relevance
exists wmi

Sharing

Social Media:
Share this page on Yammer

Comments

Log In or Register to leave comments!