MFETCONT _D{O`!` >2+̍8:8A7C_βkdBǖA?
x5Yhn6_0 H֦sBOQ]b#*E ڲ~el':`: s
Dt 8x ;U6`1 b $ i
TJl/<4,Hے)ix ~Yz5x: j w1 䒥V@`Kd6vmk}.ZLuaQ / A@ @
@
@ J
ʀ @BB@CC@DC ʼn E@F@ $ @G
AA AB "A ʀ
AB I AC E I C ʼn E J
A dA A AGJ AJ AJA
A B A C bA A
J IABILIACIEIIICIʼnIIEIL AJA IIAG I I
A I AJ ABAMACCADCʼnEMIA AG
A B A A I ʁ ABAOACCɁOCʼnEOA $ AG
A B "Bʁ
P Q BC E I C ʼn E BQ
B dB B BGJ BJ BJ bB B
J IPIRIBCICIIICIʼnIIEIBR BJB IIBG I I B I BJ RSBCIBӊEʼnSIB ʂ SBT A C BI B UVBCCIʼnBӊEBVB $
C VEC FFF\ C CX X CY CY Y X ش
A D A "Cʂ
C U [ CC C I ʼn Cӊ E \
C dC CJC IVC VC\W IICXIXICYICYIYIXIش CJ CJ CJ AD bC C
JC IUI\ICCICIIIʼnICӊIEI\ CJC IC VC ܃ CXXCYCYYXشI I I A D CI CJ C UC]CCIECӊEʼn]IC ÃC ]D ]^W C^Ƀ^^CDYXɃ Ã A D CI C U_CCIECӊEʼnɃ]ÃC $
D ]ED FFF\ D D_ ^ ^ DD _ X
A E A "Dʃ
D U _ DC I E Dӊ E ʼn ]
D dD DJD I]D ] ^ W II`I^I^I^IYIXI DJ DJ DJ AE bD D
JD IUID`IDCIIIEIDӊIEIʼnI] DJD ID ]D ܄ `^^DDYXI I I A E DI DJ D U`DCIEDӊEʼn]ID ĄD ]E ]
^
W
aɄ^^DDYXɄ Ą A E DI D UDaDCIEDӊEʼnɄ]ĄD $
E ]EE F
F
F
\ E a ^ ^ ED Y X
A F A "Eʄ
E U a EC I E Eӊ E ʼn ]
E dE EJE I]E ] ^ W IIbI^I^IEDIYIXI EJ EJ EJ AF bE E
JE IUIEbIECIIIEIEӊIEIʼnI] EJE IE ]E ܅ b^^EDYXI I I A F EI EJ E UbECIEӊEʼnEƉ]IE ŅE ]F ] ^ W EcɅ^^EDYXɅ Ņ A F EI E UɅcECCɅ_ʼnEӊEcŅE $
F dEF F F \ F Fd X FY FY Y X ش
A G A "Fʅ
P d FC E I E ʼn E d
F dF F FGJ FJ FJ% F% % bF F
J IRIeIFCIFYICIICIFfIʼnIf FJF I fg G A F I IF' I I FJ FBgFCFYCCCFf̉ʼngIF ƆFG Ɔ ( F I ʆ UFhFCICEFӊʼnEɆhƆF $
G hEG FF\ G Gi X GY GY Y X ش
A H A "Gʆ
P i GC C I C ʼn Gӊ E i
G dG G GGJ GJ GJ * bG G
JG IRIGjIGCIIIGӊIEIEIʼnIj GJG I jYI I I A H GI GJ G UkGCCIʼnGӊEGkIG LJG ɇkH kW kXGYGYɇ_Xش LJ A H G I ʇ GBlGCEGDCʼnEGlLJG $ GG
A, "H ʇ
HB l HC E HD C ʼn E m
H dH H HGJ HJ HJ H- bH H
J IPImIHCIEIIICIʼnIIEIm HJH IIHG I I . H I HJ UHnHCCIʼnECnIH ȈH nI oIoW ɈoXHYHYɈ_Ɉ^ش Ȉ A I H I ʈ UoHCCIʼnECpȈH $
I nEI F FIF\ I Ip X IY IY I ^ ش
A J "I ʈ
U p IC C I ʼn E C p
I dI IJI InI o qW I IIqIXI_IIYIIIXIش I J I J IJ
AJ bI I
J IPIqIICICIIICI ʼnI IEICIq IJI IIIG I I 2 J2 I I I J UrICCI ʼn ECrII ɉI nJ
sJs
ɉsX gIYIɉ^ش ɉ A
J I I PsICCIC ʼn EC tɉI $
IG
AJ4 "J
ʉ
R t JC I
E
ʼn t
J dJ JJ I
uIJT J
J
J
J
JJ
AK bJ J
J IPIJuIJCIEIIICI
ʼnI
IEICIu JJJ IIJG
I
I
5 J I
J
b@ @ @ require CommonUtils ACTIVATION THROTTLEPERCENT Y@ CONFIGURATIONS BASIC datatype teletype sysprop id % CB8F682B-85E3-4ef6-900C-201210090005 host node static no
frequency >@ sanitize
startdate @ $A throttlePercent optinrequired yes desc ; Processor Name, Processor Architecture and OS Architecture query provided where when how select sys.hw.processor.name sys.hw.processor.architecture sys.hw.processor.osarchitecture sys.hw.processor.numberofcores + sys.hw.processor.numberoflogicalprocessors % 03C97B4B-3B61-4306-9ECE-1D5162DB67AA ? ALL OS properties sys.sw.os.name sys.sw.os.version sys.sw.os.manufacturer sys.sw.os.language sys.sw.os.type sys.sw.os.lastbootuptime sys.sw.os.numberofusers sys.sw.os.sp.majorversion sys.sw.os.sp.minorversion % 03C97B4B-3B61-4306-9ECE-1D5162DB67A1 Get Internet Explorer Version sys.sw.internetexplorer.version % CB8F682B-85E3-4ef6-900C-201210090006 % Disk Name, Type Size and Description sys.hw.diskdrive.name sys.hw.diskdrive.caption sys.hw.diskdrive.type sys.hw.diskdrive.size sys.hw.diskdrive.description $ sys.hw.diskdrive.partitionsignature % CB8F682B-85E3-4ef6-900C-201210090007 .@! Installed application properties sys.sw.application.name sys.sw.application.version ! sys.sw.application.installeddate pprop % CB8F682B-85E3-4ef6-900C-201210090008 DAT Date and Version pprop.vse.av.datver pprop.vse.av.datdate % CB8F682B-85E3-4ef6-900C-201210090009 Engine Version pprop.vse.av.engver sysevt % E2C5C3F2-A3EB-4144-81B7-80B3B5E50200 I@ MAC crashes maxoccur @
sysevt.level
sysevt.id sysevt.source sysevt.timeoccured sysevt.description pplog % 72580771-A5D8-4770-BB99-B30133D46647 Error in SolidCore log pp MAC path
POINTPRODUCT
SOLIDCORE logpath searchkeyword ERROR
matchcase linesbefore linesafter @ bRegEx bMultiline pplog.lines pplog.pp pplog.path pplog.searchkeyword pplog.matchcase % 1AB68100-8885-4707-93B0-29E8C967484F Error in s3diag log S3DIAG % 3B6ABD12-3C35-4D5E-94E5-FE5AEBEF1F4B Error in s3setup log S3SETUP % 7073DDC1-DCE0-4EE4-B3F0-FECF05E0E041 Hips Log collection HIPS
HIPSHIELD 4 ()(SigRuleClass="Illegal_API_Use")() 4@% 7073DDC1-DCE0-4EE4-B3F0-FECF05E0E042 4 ()(SigRuleClass="Buffer_Overflow")() $@% 7073DDC1-DCE0-4EE4-B3F0-FECF05E0E043 , ()(SigRuleClass="Program")() % 7073DDC1-DCE0-4EE4-B3F0-FECF05E0E044 * ()(SigRuleClass="Files")() % 7073DDC1-DCE0-4EE4-B3F0-FECF05E0E045 ) ()(SigRuleClass="NIPS")() % 7073DDC1-DCE0-4EE4-B3F0-FECF05E0E046 ) ()(SigRuleClass="Hook")() % 7073DDC1-DCE0-4EE4-B3F0-FECF05E0E047 - ()(SigRuleClass="Registry")() % 7073DDC1-DCE0-4EE4-B3F0-FECF05E0E048 * ()(SigRuleClass="Isapi")() % 7073DDC1-DCE0-4EE4-B3F0-FECF05E0E049 santize - ()(SigRuleClass="Services")() % 8B9CEC9B-FBB4-4A21-B476-C0761E459B61 MSME error logs MSME ,2, % 5BCE4839-6F2B-4FB9-A061-A97F364986DA , Collect Engine and Content Version for HIPS pprop.hips.props.ContentVersion pprop.hips.props.CoreRef pprop.hips.props.Version % 73B5EEB4-690D-48BB-B023-0D33B8078002 dest MET " Windows events for Cloud metering - D@ getMeteringData % 93855651-8C85-4B38-913F-82284DC7B59D vCPU count for metering sysprop.processorcount % 63AC1656-DD89-4BED-8100-3EFB3DD6DCBF DPC error messages DLP DPC [ERROR] % 5CF9EFFE-0429-4CAB-BEA1-27E477B70599 DPC Version pprop.dpc.props.Version % D41E39D4-D98E-40BF-ADAC-51030B907F50 Windows events for DPC crashes % 45A33D9F-BBDE-4294-8DAD-45EBFFE446F6 Orion log grep for connectors EPO 4 Not applying Region Hierarchy fixes for AWS account % FE8FDDF8-5B1F-4FB0-97FC-716181739931 Processes running on the system sys.sw.process.name % F8816699-D277-4337-983B-237CDDD99504 services running on the system sys.sw.service.name % FE8FDDF8-5B1F-4FB0-97FC-716181739932 4 Validate whether the product is upgraded or install product.watson.install.type % 678FB0B3-6DE3-45B0-9E91-A1809DF880A6 ; Grep bootstrapper logs for installation success or failure watson HARVEY
BOOTSTRAP 2 Module installation succeeded|installation failed % 8ECC2BB5-CAC0-467F-B900-275AB95368E6 + Entry in Bootstrapper log to detect Watson
ENDP_.*_1010 % F7073513-4D40-4CBD-B731-3328AF741DF8 2 Grep install logs for installation failure reason INSTALL return value 3 % CCB72979-A17D-49C4-A42B-1D13AC892AD7 watson install path ! pprop.watson.props.installpath32 ! pprop.watson.props.installpath64 % D8B8D8EE-4C8F-4E99-8F43-7C98A795D5C0 $ EndpointSecurityPlatform error logs WATSON
errorlogpath .* % CCB72979-A17D-49C4-A42B-1D13AC892AD8 Product Version Installed pprop.watson.props.version % E2C5C3F2-A3EB-4144-81B7-80B3B5E50201 Watson crashes % CCB72979-A17D-49C4-A42B-1D13AC892AD9 HIPS Firewall Status pprop.hips.props.firewallstatus ' ) ) ; ; M M _ _ q q
@@ @ W@ @
POINTPRODUCT VSE
installed
@@ @ W@ @
POINTPRODUCT VSE
installed
@@ @ W@ @
POINTPRODUCT MAC
installed
@@ @ W@ @
POINTPRODUCT MAC
installed
@@ @ W@ @
POINTPRODUCT MAC
installed
@@ @ W@ @
POINTPRODUCT MAC
installed
@@ @ W@ @
POINTPRODUCT HIPS
installed
@@ @ W@ @
POINTPRODUCT HIPS
installed
@@ @ W@ @
POINTPRODUCT HIPS
installed
@@ @ W@ @
POINTPRODUCT HIPS
installed ! !
@@ @ W@ @
POINTPRODUCT HIPS
installed 2 2
@@ @ W@ @
POINTPRODUCT HIPS
installed C C
@@ @ W@ @
POINTPRODUCT HIPS
installed T T
@@ @ W@ @
POINTPRODUCT HIPS
installed e e
@@ @ W@ @
POINTPRODUCT HIPS
installed w w @@ @ @ @ @@ A W@ @
POINTPRODUCT MSME
installed extractlog
@@ @ W@ @
POINTPRODUCT HIPS
installed
@@ @ W@ @
POINTPRODUCT DPC
installed
@@ @ W@ @
POINTPRODUCT DPC
installed
@@ @ W@ @
POINTPRODUCT DPC
installed
@@ @ W@ @
POINTPRODUCT EPO
installed
@@ @ W@ @
POINTPRODUCT WATSON
installed # #
@@ @ W@ @
POINTPRODUCT WATSON
installed 5 5 G G Y Y k k
@@ @ W@ @
POINTPRODUCT WATSON
installed
@@ @ W@ @
POINTPRODUCT WATSON
installed
@@ @ W@ @
POINTPRODUCT WATSON
installed
@@ @ W@ @
POINTPRODUCT WATSON
installed
@@ @ W@ @
POINTPRODUCT HIPS
installed