Viewing Computer Details

Updated in 8.6

You view the detailed data about an audited computer in the Computer [Computer Name ] window. Also, this window allows you to edit the user defined fields, if your Alloy Discovery administrator has configured any.

To open this window, double-click an audited computer (marked with the blue computer icon) either in the Computers or in the All Nodes grid.

This window displays the data about the computer on the following tabs: Overview, Configuration, Discovered Installations, Virtual Machines, SNMP Data, Custom Data (optional), Attachments, and Changes.

Overview tab

This tab shows basic information about the computer collected during its audit. This tab also displays whether a detected computer is a virtual machine and where the virtual machine resides. This information is shown in the Virtual Machine and the Host fields respectively. The SSD field also shows whether a computer has any solid-state drive (SSD) detected or not.

NOTE: You can associate or re-associate virtual machines with their host machines manually, for details, see Associating Virtual Machines with Host Machines.

ClosedYou can also use this tab to mark/unmark a computer as a virtual machine manually.

To mark or unmark a computer as a virtual machine:

  • To mark a computer as a virtual machine, select Yes from the Virtual Machine drop-down list and click Save.

  • To unmark a computer, select No from the Virtual Machine drop-down list and click Save.

Configuration tab

This tab arranges the audit information in a number of categories: Overview, Hardware, Software, Peripherals, Network, and User. Each of these top-level categories contains one or more subcategories that provide more specific information.

NOTE: The list of subcategories displayed in the left pane of the audit snapshot varies for Windows, Linux, and Mac OS.

Overview

The Overview category includes the following subcategories:

Subcategory Explanation

System Overview

Basic information including computer name, domain or workgroup, operating system, memory size, etc.

For Hypervisors, the Hypervisor Version field shows the product name and version of the hypervisor. Under Virtualization, you can also see read-only parameters collected during audit:

  • Virtual Machine - The check box that defines whether the computer is a virtual machine.

  • VM Family - The virtualization platform family of the virtual machine.

Security

(Windows-specific data)

Security data including the information from the Windows Security Center (or the Action Center in Windows 7, Windows 8, Windows 8.1, and Windows 10), Windows firewall, installed firewall software, and installed antivirus software. The list of displayed security data varies depending on the Windows OS.

The Windows Security Center (WSC) security provider categories can have the following values:

  • Good - The status of the category is good and does not need user attention.

  • Not Monitored - The status is not monitored by WSC.

  • Poor - The status is poor and the computer may be at risk.

  • Snooze - The category is in snooze state. Snooze indicates that WSC is not actively protecting the computer.

Virtual Machines

This section appears only for those computers where virtual machines reside. It shows a list of all detected virtual machines.

Hardware

The Hardware category includes the following subcategories:

Subcategory Explanation

CPU and Mainboard

Details about the CPU and mainboard.

System BIOS and Chassis

Information about the System BIOS and system enclosure(s).

Memory

Detailed memory specs, including virtual memory information and RAM speed.

Ports

(Windows- and Linux-specific data)

Information about mainboard's internal and external port connectors, and the port type.

Slots

(Windows-specific data)

Information about data bus slots.

Software

The Software category includes the following subcategories:

Subcategory Explanation

Operating System

Detailed OS information, including service pack and Product ID.

The Operating System section in the Audit Snapshot Viewer includes (when available) the OEM Information sub-section. This sub-section shows the Windows OEM information retrieved on brand name computers: the manufacturer name, computer model, and other support details specified by the original equipment manufacturer (OEM).

Programs

Windows machines: Software products based on the information from the Uninstall section of the registry (the information you can see in the Windows Add or Remove Programs tool). To see updates, select the Show Updates check box.

Linux machines: Software products based on the information from a package management system.

Mac OS machines: Software products based on the software information provided by the Mac OS X's System Profiler utility.

File Scan (detailed)

(Windows-specific data)

A list of files created by the detailed portion of the software scan. For details, see File Scan Options.

File Scan (summary)

(Windows-specific data)

A list of file masks created by the summary portion of the software scan. For details, see File Scan Options.

Windows Update

(Windows-specific data)

Information about Windows updates.

Software Engines

(Windows-specific data)

Software engines such as ODBC and DirectX.

Startup

(Windows- and Linux-specific data)

Information about what runs on the computer at boot time, including information about startup folders and registry startup entries.

Environment Variables

(Windows- and Linux-specific data)

Environment variables.

Registry

(Windows-specific data)

A list of captured registry keys. For more information, see Registry Keys.

Regional Settings

Readout of the machine's regional settings.

Services

(macOS-specific data)

A list of system-wide launch daemons.

NT Services

(Windows-specific data)

A list of all Windows services.

ODBC

(Windows-specific data)

A list of ODBC libraries and connections.

Event Log

(Windows-specific data)

A list of event log entries. For details, see Event Log.

Running Processes

(Windows-specific data)

Information about processes running on the computer at the moment of the audit.

Task Scheduler

(Windows-specific data)

Data obtained from the Windows Task Scheduler. For details, see Miscellaneous.

The Event Log sub-section allows you to translate the time stamps of recorded events in various time zones:

  • Administrator - shows time in the Administrator's time zone (local time);

  • Client - shows time in the user's time zone;

  • UTC - converts time to UTC (Universal Time Coordinated, same as GMT or Greenwich Mean Time).

Peripherals

The Peripherals category includes the following subcategories:

Subcategory Explanation

Video System

(Windows- and macOS-specific data)

Details about your video card, such as chipset and refresh rate.

Device Drivers

(Windows- and Linux-specific data)

Devices installed on the machine.

Disk Drives

All drives on the machine, including floppy, CD/DVD drive, and fixed drives as well as mapped drives.

Printers

(Windows-specific data)

A list of installed printers.

USB Devices

(Windows-specific data)

A list of connected USB devices.

PCI Devices

(Windows-specific data)

A list of installed PCI devices.

Network

The Network category includes the following subcategories:

Subcategory Explanation

Network Configuration

(Windows-specific data)

Miscellaneous network information, such as current user and domain name.

Route Tables IP routing tables for IPv4 and IPv6.

Network Adapters

Parameters (IP Address, MAC address, etc.) of each network adapter.

Mapped Network Drives

(Windows-specific data)

A list of drive mappings.

Shared Resources

(Windows- and Linux-specific data)

A list of shared resources.

User
Windows- and Linux-specific data

The User category includes the following sub-categories:

Subcategory Explanation

User Information

(Windows-specific data)

Details about the current user (when available, shows information from the Active Directory, such as e-mail address, phone numbers, physical address, etc.).

User Accounts

Windows and Mac OS machines: A list of local user accounts and users groups.

Linux machines: A list of local user accounts.

Discovered Installations tab

This tab lists software products installed on the audited computer. You can see the detailed information about each record by double-clicking the desired software product from the list. The information will be shown in the Software Installation window.

Virtual Machines tab

This tab shows the information about virtual machines running on this host. For detailed information, see Associating Virtual Machines with Host Machines.

SNMP Data tab

This tab shows the information collected via SNMP. For detailed information on the collected SNMP data, see Viewing and Changing Network Node Properties.

Attachments tab

This tab allows you to manage attachments added to the computer. For details, see Attachments.

Custom Data tab

This tab appears if your Alloy Discovery administrator has configured any custom input fields, or registry key fields, or user-defined fields (for details, see Field Customization).

On this tab, you view or edit the values of user defined fields.

Changes tab

This tab shows information about Change Events detected on this computer. Changes are grouped by the Audit Date (by default). You can manage the grouping condition by switching the view ( e.g By Date, By Category) or creating your own grouping condition (for details, see Grouping records). You can see the detailed information about each record by double-clicking the desired Change Event from the list.

By default, the Changes list includes the following data:

Column name Description

Node

The computer name where the Change was detected.

Type

The type of the changed object.

Category

The category of the Change.

Component

The object that was changed.

Change

The event occurred with the object.

Date

The date and time when the Change data was uploaded.

Attribute

The attribute of the component.

Old

The old value of the changed attribute.

New

The new value of the changed attribute.