Online Help

Viewing Computer Details

Updated in 2022.1

You view the detailed data about an audited computer in the [Computer Name ] window. Also, here is where you can assign values to computer's user-defined fields, if your Alloy Discovery administrator has configured any.

To open this window, double-click an audited computer (marked with the blue computer icon) either in the Computers or in the All Nodes grid.

This window displays the data about the computer on the following tabs: Overview, Configuration, Discovered Installations, Virtual Machines, SNMP Data, Custom Data (optional), Attachments, and Changes.

Overview tab

This tab summarizes basic information about the computer. Here you see the computer name, its operating system, CPU model, memory size, and other details. For example, you can see whether the computer is a virtual machine and where the virtual machine resides (the Virtual Machine and the Host fields, respectively) or if the computer has any solid-state drive (SSD) detected or not (the SSD field).

TIP: You can use this tab to mark the computer as a virtual machine and manually associate the virtual machine with its host, as described below. For additional details, see Associating Virtual Machines with Host Machines.

ClosedTo mark or unmark the computer as a virtual machine:

  • To mark the computer as a virtual machine:

    1. From the Virtual Machine drop-down list, select Yes.

      You may want to manually associate the virtual machine with its host. To do this, select the host from the Host drop-down list.

    2. Click Save. If you want to save your changes and close the window, click OK.

  • To unmark the computer as a virtual machine:

    1. From the Virtual Machine drop-down list, select No.

    2. Click Save. If you want to save your changes and close the window, click OK.

Configuration tab

The Configuration tab is your embedded Audit Snapshot Viewer. It displays all the details about the computer that have been collected during the audit. The audit data is divided into several main categories: Overview, Hardware, Software, Peripherals, Network, and User. Each of these top-level category contains subscategories that provide more specific information.

NOTE: The list of categories displayed in the left pane of the audit snapshot differs for Windows, Linux, and macOS computers.

Overview

The Overview category includes the following subcategories:

Subcategory Description

System Overview

Basic audit information, including computer name, domain or workgroup, operating system, memory size, etc.

For Hypervisors, the Hypervisor Version field shows the product name and version of the hypervisor. Under Virtualization, you can also see read-only parameters collected during the audit:

  • Virtual Machine - The check box that defines whether the computer is a virtual machine.

  • VM Family - The virtualization platform family of the virtual machine.

Security

Windows-specific data

Security data including the information from the Security and Maintenance component (formerly known as Action Center or Windows Security Center in earlier versions), Windows firewall, installed firewall software, and installed antivirus software. The list of displayed security depends on the Windows OS.

The UEFI Secure Boot check box shows the Secure Boot status on the UEFI (Unified Extensible Firmware Interface) computers.

The Windows Security Center (WSC) categories can have the following values:

  • Good - The status of the category is good and does not need user attention.

  • Not Monitored - The status is not monitored by the WSC.

  • Poor - The status is poor and the computer may be at risk.

  • Snooze - The category is in snooze state. This indicates that the WSC is not actively protecting the computer.

Trusted Platform Module

Windows-specific data

Detailed information about the TPM (Trusted Platform Module), including its status and version.

This data helps you find out whether the computer supports the hardware-based, security-related functions that the TPM chip provides and see if an update of the TPM firmware is required.

Virtual Machines

This section appears only for those computers where virtual machines reside. It shows a list of all detected virtual machines.
Hardware

The Hardware category includes the following subcategories:

Subcategory Explanation

CPU and Mainboard

Details about the CPU and mainboard.

System BIOS and Chassis

Information about the System BIOS and system enclosure(s).

Memory

Detailed memory specs, including virtual memory information and RAM speed.

Ports

Windows- and Linux-specific data

Information about mainboard's internal and external port connectors, and the port type.

Slots

Windows-specific data

Information about data bus slots.
Software

The Software category includes the following subcategories:

Subcategory Description

Operating System

Detailed OS information, including service pack and Product ID.

The Operating System category may include the OEM Information subcategory. OEM Information shows the Windows OEM information retrieved on brand name computers: the manufacturer name, computer model, and other support details specified by the original equipment manufacturer (OEM).

Programs

  • Windows computers

    Software products based on the information from the Uninstall section of the registry (the information you can see in the Windows Add or Remove Programs tool). To see updates, select the Show Updates check box.

  • Linux computers:

    Software products based on the information from a package management system.

  • macOS computers

    Software products based on the software information provided by the Mac OS X's System Profiler utility.

File Scan (detailed)

Windows-specific data

A list of files created by the detailed portion of the software scan.

For details, see File Scan Options.

File Scan (summary)

Windows-specific data

A list of file masks created by the summary portion of the software scan.

For details, see File Scan Options.

Windows Update

Windows-specific data

Information about Windows updates.

Software Engines

Windows-specific data

Software engines such as ODBC and DirectX.

Startup

Windows- and Linux-specific data

Information about what runs on the computer at boot time, including information about startup folders and registry startup entries.

Environment Variables

Windows- and Linux-specific data

Environment variables.

Registry

Windows-specific data

A list of captured registry keys. For more information, see Registry Keys.

Regional Settings

Readout of the machine's regional settings.

Services

macOS-specific data

A list of system-wide launch daemons.

NT Services

Windows-specific data

A list of all Windows services.

ODBC

Windows-specific data

A list of ODBC libraries and connections.

Event Log

Windows-specific data

A list of event log entries.

For details, see Event Log.

Running Processes

Windows-specific data

Information about processes running on the computer at the moment of the audit.

Task Scheduler

Windows-specific data

Data obtained from the Windows Task Scheduler.

For details, see Miscellaneous.

The Event Log sub-section allows you to translate the time stamps of recorded events in various time zones:

  • Administrator - shows time in the Administrator's time zone (local time);

  • Client - shows time in the user's time zone;

  • UTC - converts time to UTC (Universal Time Coordinated, same as GMT or Greenwich Mean Time).

Peripherals

The Peripherals category includes the following subcategories:

Subcategory Explanation

Video System

Windows- and macOS-specific data

Details about your video card, such as chipset and refresh rate.

Device Drivers

Windows- and Linux-specific data

Devices installed on the machine.

Disk Drives

All drives on the machine, including floppy, CD/DVD drive, and fixed drives as well as mapped drives.

Printers

Windows-specific data

A list of installed printers.

USB Devices

Windows-specific data

A list of connected USB devices.

PCI Devices

Windows-specific data

A list of installed PCI devices.
Network

The Network category includes the following subcategories:

Subcategory Explanation

Network Configuration

Windows-specific data

Miscellaneous network information, such as current user and domain name.
Route Tables IP routing tables for IPv4 and IPv6.

Network Adapters

Parameters (IP Address, MAC address, etc.) of each network adapter.

Mapped Network Drives

Windows-specific data

A list of drive mappings.

Shared Resources

Windows- and Linux-specific data

A list of shared resources.
User

Windows- and Linux-specific data

The User category includes the following sub-categories:

Subcategory Explanation

User Information

Windows-specific data

Details about the current user (when available, shows information from the Active Directory, such as e-mail address, phone numbers, physical address, etc.).

User Accounts

  • Windows computers: A list of local user accounts and users groups.

  • Linux computers: A list of local user accounts.

Discovered Installations tab

This tab lists software products installed on the audited computer. You can see the detailed information about each record by double-clicking the desired software product from the list. The information will be shown in the Software Installation window.

Virtual Machines tab

This tab shows the information about virtual machines running on this host. For detailed information, see Associating Virtual Machines with Host Machines.

SNMP Data tab

This tab shows the information collected via SNMP. For detailed information on the collected SNMP data, see Viewing and Changing Network Node Properties.

Attachments tab

This tab allows you to manage attachments added to the computer. For details, see Attachments.

Custom Data tab

This tab appears if your Alloy Discovery administrator has configured any custom input fields, or registry key fields, or user-defined fields (for details, see Field Customization).

On this tab, you view or edit the values of user defined fields.

Changes tab

This tab shows information about Change Events detected on this computer. Changes are grouped by the Audit Date (by default). You can manage the grouping condition by switching the view ( e.g By Date, By Category) or creating your own grouping condition (for details, see Grouping records). You can see the detailed information about each record by double-clicking the desired Change Event from the list.

By default, the Changes list includes the following data:

Column name Description

Node

The computer name where the Change was detected.

Type

The type of the changed object.

Category

The category of the Change.

Component

The object that was changed.

Change

The event occurred with the object.

Date

The date and time when the Change data was uploaded.

Attribute

The attribute of the component.

Old

The old value of the changed attribute.

New

The new value of the changed attribute.