Compare commits
No commits in common. 'c9' and 'cs10' have entirely different histories.
@ -1,16 +1,16 @@
|
|||||||
SOURCES/mingw-qemu-ga-win-106.0.1-1.el9.src.rpm
|
SOURCES/mingw-qemu-ga-win-108.0.2-1.el9.src.rpm
|
||||||
SOURCES/qemu-ga-win-106.0.1-1.el9.noarch.rpm
|
SOURCES/qemu-ga-win-108.0.2-1.el9.noarch.rpm
|
||||||
SOURCES/qxl-win-unsigned-0.1-24-sources.zip
|
SOURCES/qxl-win-unsigned-0.1-24-sources.zip
|
||||||
SOURCES/spice-qxl-wddm-dod-0.21-2.el8.noarch.rpm
|
SOURCES/spice-qxl-wddm-dod-0.21-2.el8.noarch.rpm
|
||||||
SOURCES/spice-qxl-wddm-dod-0.21-2.el8.src.rpm
|
SOURCES/spice-qxl-wddm-dod-0.21-2.el8.src.rpm
|
||||||
SOURCES/spice-vdagent-win-0.10.0-5.el8.src.rpm
|
SOURCES/spice-vdagent-win-0.10.0-5.el8.src.rpm
|
||||||
SOURCES/spice-vdagent-win-x64-0.10.0-5.el8.noarch.rpm
|
SOURCES/spice-vdagent-win-x64-0.10.0-5.el8.noarch.rpm
|
||||||
SOURCES/spice-vdagent-win-x86-0.10.0-5.el8.noarch.rpm
|
SOURCES/spice-vdagent-win-x86-0.10.0-5.el8.noarch.rpm
|
||||||
SOURCES/virtio-win-1.9.35-bin-for-rpm.tar.gz
|
SOURCES/virtio-win-1.9.44-bin-for-rpm.tar.gz
|
||||||
SOURCES/virtio-win-gt-x64.msi
|
SOURCES/virtio-win-gt-x64.msi
|
||||||
SOURCES/virtio-win-gt-x86.msi
|
SOURCES/virtio-win-gt-x86.msi
|
||||||
SOURCES/virtio-win-guest-tools.exe
|
SOURCES/virtio-win-guest-tools.exe
|
||||||
SOURCES/virtio-win-installer-1.9.35-0-sources.zip
|
SOURCES/virtio-win-installer-1.9.44-0-sources.zip
|
||||||
SOURCES/virtio-win-prewhql-0.1-240-sources.zip
|
SOURCES/virtio-win-prewhql-0.1-266-sources.zip
|
||||||
SOURCES/winfsp-1.12.22339-sources.zip
|
SOURCES/winfsp-2.0.23075-sources.zip
|
||||||
SOURCES/winfsp-1.12.22339.msi
|
SOURCES/winfsp-2.0.23075.msi
|
||||||
|
@ -1,16 +1,16 @@
|
|||||||
82c187edce788f5968c227cc1da3db001250c35d SOURCES/mingw-qemu-ga-win-106.0.1-1.el9.src.rpm
|
2edafa2d96588ea5a559f1b29e9bf5669e505f02 SOURCES/mingw-qemu-ga-win-108.0.2-1.el9.src.rpm
|
||||||
27ab2810f7ad43b9a6348d10b2d09142ab0be776 SOURCES/qemu-ga-win-106.0.1-1.el9.noarch.rpm
|
f3a5cf94bde206e52d084bd0cd6695adba4eb2fb SOURCES/qemu-ga-win-108.0.2-1.el9.noarch.rpm
|
||||||
1cb09750a3a1965a147889f5db3ec7b8feb005b8 SOURCES/qxl-win-unsigned-0.1-24-sources.zip
|
1cb09750a3a1965a147889f5db3ec7b8feb005b8 SOURCES/qxl-win-unsigned-0.1-24-sources.zip
|
||||||
95dab7088166ba71366bcbcb099267d771d61661 SOURCES/spice-qxl-wddm-dod-0.21-2.el8.noarch.rpm
|
95dab7088166ba71366bcbcb099267d771d61661 SOURCES/spice-qxl-wddm-dod-0.21-2.el8.noarch.rpm
|
||||||
055c8fe47a378ef48b89846ba9c2474238ad9aea SOURCES/spice-qxl-wddm-dod-0.21-2.el8.src.rpm
|
055c8fe47a378ef48b89846ba9c2474238ad9aea SOURCES/spice-qxl-wddm-dod-0.21-2.el8.src.rpm
|
||||||
085728c7db3503db1f7c8f1d264ca45b365d6837 SOURCES/spice-vdagent-win-0.10.0-5.el8.src.rpm
|
085728c7db3503db1f7c8f1d264ca45b365d6837 SOURCES/spice-vdagent-win-0.10.0-5.el8.src.rpm
|
||||||
fb35d3c12b9069133e651f54c35ae6ee68537959 SOURCES/spice-vdagent-win-x64-0.10.0-5.el8.noarch.rpm
|
fb35d3c12b9069133e651f54c35ae6ee68537959 SOURCES/spice-vdagent-win-x64-0.10.0-5.el8.noarch.rpm
|
||||||
2d4bd6f8fb1b306f4d49a5a990e2da9c5f5baeac SOURCES/spice-vdagent-win-x86-0.10.0-5.el8.noarch.rpm
|
2d4bd6f8fb1b306f4d49a5a990e2da9c5f5baeac SOURCES/spice-vdagent-win-x86-0.10.0-5.el8.noarch.rpm
|
||||||
e0cb9d972c38cec824cc4d84b54110ae54f5cfba SOURCES/virtio-win-1.9.35-bin-for-rpm.tar.gz
|
fdb57fb57cfc64377c1c429ae919a1747b6e343c SOURCES/virtio-win-1.9.44-bin-for-rpm.tar.gz
|
||||||
756bab2368d28ec936af496a8a3e9723a50ffc35 SOURCES/virtio-win-gt-x64.msi
|
53b152b0ac65f73cde78afdaa2eef8fa927cce1b SOURCES/virtio-win-gt-x64.msi
|
||||||
33159bbbb6242fec2425634ab78472167580d206 SOURCES/virtio-win-gt-x86.msi
|
488d604e74ed568b0ff049c2e8ef054068849726 SOURCES/virtio-win-gt-x86.msi
|
||||||
97f1f48ec0ea0bb449dad57227b458024e7dd441 SOURCES/virtio-win-guest-tools.exe
|
78a095ccc18d0c48e128f2f9227be4112bf43de1 SOURCES/virtio-win-guest-tools.exe
|
||||||
0621a23248ae02eba9d1efde00d6abd7196acfdf SOURCES/virtio-win-installer-1.9.35-0-sources.zip
|
438e7fed35c81b27a0d2a67cc67817d921db6f24 SOURCES/virtio-win-installer-1.9.44-0-sources.zip
|
||||||
cb231b467e637e938529c5f75512cf1e6eb9ee8a SOURCES/virtio-win-prewhql-0.1-240-sources.zip
|
b4c7f106c95cd9ac7cae41b8d2b6906e6ad85932 SOURCES/virtio-win-prewhql-0.1-266-sources.zip
|
||||||
151e6a4b1d429c5bbb768f4aee51055708832ae5 SOURCES/winfsp-1.12.22339-sources.zip
|
8cbe79255a6749d23d5dec0d2cd51f22fb02a927 SOURCES/winfsp-2.0.23075-sources.zip
|
||||||
ced3777f88438097ee0f4fc94ac951e4d2f2b602 SOURCES/winfsp-1.12.22339.msi
|
89c1012ca71e4863d8f5329a7addfa05e0f51e62 SOURCES/winfsp-2.0.23075.msi
|
||||||
|
@ -0,0 +1,288 @@
|
|||||||
|
# This script collects various system information for diagnostic
|
||||||
|
# purposes. The collected data includes system configuration,
|
||||||
|
# event logs, driver lists, registry information, update logs,
|
||||||
|
# services, uptime, running processes, installed applications,
|
||||||
|
# installed KBs, and memory dumps.
|
||||||
|
|
||||||
|
# Copyright (c) 2024 Red Hat, Inc. and/or its affiliates. All rights reserved.
|
||||||
|
|
||||||
|
# Redistribution and use in source and binary forms, with or without
|
||||||
|
# modification, are permitted provided that the following conditions
|
||||||
|
# are met:
|
||||||
|
# 1. Redistributions of source code must retain the above copyright
|
||||||
|
# notice, this list of conditions and the following disclaimer.
|
||||||
|
# 2. Redistributions in binary form must reproduce the above copyright
|
||||||
|
# notice, this list of conditions and the following disclaimer in the
|
||||||
|
# documentation and/or other materials provided with the distribution.
|
||||||
|
# 3. Neither the names of the copyright holders nor the names of their contributors
|
||||||
|
# may be used to endorse or promote products derived from this software
|
||||||
|
# without specific prior written permission.
|
||||||
|
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
|
||||||
|
# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
||||||
|
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
||||||
|
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE
|
||||||
|
# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
||||||
|
# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
||||||
|
# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
||||||
|
# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
||||||
|
# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
||||||
|
# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
||||||
|
# SUCH DAMAGE.
|
||||||
|
|
||||||
|
|
||||||
|
# Ensure the script runs with an unrestricted execution policy (for Windows 10 and Windows Server 2016)
|
||||||
|
# Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope Process -Force
|
||||||
|
|
||||||
|
# For gathering event logs run the script as an administrator
|
||||||
|
|
||||||
|
# IncludeSensitiveData is used to include memory dumps add this parameter to your command line to collect them
|
||||||
|
# Example: .\CollectSystemInfo.ps1 -IncludeSensitiveData
|
||||||
|
|
||||||
|
param (
|
||||||
|
[switch]$IncludeSensitiveData,
|
||||||
|
[switch]$Help
|
||||||
|
)
|
||||||
|
|
||||||
|
Add-Type -AssemblyName 'System.IO.Compression.FileSystem'
|
||||||
|
|
||||||
|
function Compress-Files {
|
||||||
|
param (
|
||||||
|
[string]$SourcePath,
|
||||||
|
[string]$DestinationPath
|
||||||
|
)
|
||||||
|
|
||||||
|
[System.IO.Compression.ZipFile]::CreateFromDirectory($SourcePath, $DestinationPath)
|
||||||
|
}
|
||||||
|
|
||||||
|
function Show-Help {
|
||||||
|
Write-Host "Usage: .\CollectSystemInfo.ps1 [-IncludeSensitiveData] [-Help]"
|
||||||
|
Write-Host ""
|
||||||
|
Write-Host "Parameters:"
|
||||||
|
Write-Host " -IncludeSensitiveData Include sensitive data (memory dump)"
|
||||||
|
Write-Host " -Help Show this help message"
|
||||||
|
Write-Host ""
|
||||||
|
Write-Host "If no parameters are provided, the script will run with default behavior."
|
||||||
|
}
|
||||||
|
|
||||||
|
function Export-SystemConfiguration {
|
||||||
|
try {
|
||||||
|
Write-Host 'Collecting system configuration started it may take a while...'
|
||||||
|
Start-Process -FilePath 'msinfo32.exe' -ArgumentList '/report', (Join-Path $logfolderPath 'msinfo32.txt') -Wait
|
||||||
|
Write-Host 'System configuration collection completed.'
|
||||||
|
} catch {
|
||||||
|
Write-Warning "Failed to collect system configuration: $_"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function Export-EventLogs {
|
||||||
|
try {
|
||||||
|
$logNames = @('system', 'security', 'application')
|
||||||
|
foreach ($logName in $logNames) {
|
||||||
|
$logPath = Join-Path $logfolderPath "$logName.evtx"
|
||||||
|
wevtutil epl $logName $logPath
|
||||||
|
wevtutil al $logPath
|
||||||
|
}
|
||||||
|
Write-Host 'Event logs collection completed.'
|
||||||
|
} catch {
|
||||||
|
Write-Warning "Failed to collect event logs: $_"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function Export-DriversList {
|
||||||
|
try {
|
||||||
|
Get-WindowsDriver -Online -All | Select-Object -Property * | Export-Csv -Path (Join-Path $logfolderPath 'drv_list.csv') -NoTypeInformation
|
||||||
|
Write-Host 'Drivers list collection completed.'
|
||||||
|
} catch {
|
||||||
|
Write-Warning "Failed to collect drivers list: $_"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function Export-VirtioWinStorageDrivers {
|
||||||
|
$registryPaths = @(
|
||||||
|
'HKLM:\SYSTEM\CurrentControlSet\Services\Disk',
|
||||||
|
'HKLM:\SYSTEM\CurrentControlSet\Services\viostor\Parameters',
|
||||||
|
'HKLM:\SYSTEM\CurrentControlSet\Services\vioscsi\Parameters'
|
||||||
|
)
|
||||||
|
$valuesToQuery = @('IoTimeoutValue', 'TimeoutValue')
|
||||||
|
|
||||||
|
foreach ($path in $registryPaths) {
|
||||||
|
foreach ($value in $valuesToQuery) {
|
||||||
|
$property = Get-ItemProperty -Path $path -Name $value -ErrorAction SilentlyContinue
|
||||||
|
$output = "$path\$value : $($property.$value)"
|
||||||
|
$output | Out-File -FilePath (Join-Path $logfolderPath 'virtio_disk.txt') -Append
|
||||||
|
}
|
||||||
|
}
|
||||||
|
Write-Host 'Virtio-Win storage drivers configuration collection completed.'
|
||||||
|
}
|
||||||
|
|
||||||
|
function Export-WindowsUpdateLogs {
|
||||||
|
try {
|
||||||
|
$logPath = Join-Path $logfolderPath 'WindowsUpdate.log'
|
||||||
|
$command = "Get-WindowsUpdateLog -LogPath '$logPath'"
|
||||||
|
Start-Process -FilePath 'powershell.exe' -ArgumentList '-NoLogo', '-NoProfile', '-Command', $command -NoNewWindow -Wait -RedirectStandardOutput (Join-Path $logfolderPath 'OutputWindowsUpdate.log') -RedirectStandardError (Join-Path $logfolderPath 'ErrorWindowsUpdate.log')
|
||||||
|
Write-Host 'Windows Update logs collection completed.'
|
||||||
|
} catch {
|
||||||
|
Write-Warning "Failed to collect Windows Update logs: $_"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function Export-WindowsUptime {
|
||||||
|
try {
|
||||||
|
$uptime = (Get-Date) - (gcim Win32_OperatingSystem).LastBootUpTime
|
||||||
|
$uptime.ToString() | Out-File -FilePath (Join-Path $logfolderPath 'WindowsUptime.txt')
|
||||||
|
Write-Host 'Windows uptime collection completed.'
|
||||||
|
} catch {
|
||||||
|
Write-Warning "Failed to collect Windows uptime: $_"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function Export-ServicesList {
|
||||||
|
try {
|
||||||
|
Get-Service | Select-Object -Property Name, DisplayName, Status, StartType | Export-Csv -Path (Join-Path $logfolderPath 'Services.csv') -NoTypeInformation
|
||||||
|
Write-Host 'Services list collection completed.'
|
||||||
|
} catch {
|
||||||
|
Write-Warning "Failed to collect list of services: $_"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function Export-RunningProcesses {
|
||||||
|
try {
|
||||||
|
Get-Process | Select-Object -Property Id, ProcessName, StartTime | Export-Csv -Path (Join-Path $logfolderPath 'RunningProcesses.csv') -NoTypeInformation
|
||||||
|
Write-Host 'Running processes collection completed.'
|
||||||
|
} catch {
|
||||||
|
Write-Warning "Failed to collect list of running processes: $_"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function Export-InstalledApplications {
|
||||||
|
try {
|
||||||
|
Get-ItemProperty -Path 'HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\*' |
|
||||||
|
Select-Object -Property DisplayName, DisplayVersion, Publisher, InstallDate |
|
||||||
|
Export-Csv -Path (Join-Path $logfolderPath 'InstalledApplications.csv') -NoTypeInformation
|
||||||
|
Write-Host 'Installed applications collection completed.'
|
||||||
|
} catch {
|
||||||
|
Write-Warning "Failed to collect list of installed applications: $_"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function Export-InstalledKBs {
|
||||||
|
try {
|
||||||
|
Get-HotFix | Select-Object -Property Description, HotFixID, InstalledOn | Export-Csv -Path (Join-Path $logfolderPath 'InstalledKBs.csv') -NoTypeInformation
|
||||||
|
Write-Host 'Installed KBs collection completed.'
|
||||||
|
} catch {
|
||||||
|
Write-Warning "Failed to collect list of installed KBs: $_"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function Export-NetworkConfiguration {
|
||||||
|
try {
|
||||||
|
Get-NetAdapterAdvancedProperty | Out-File -FilePath (Join-Path $logfolderPath 'NetworkInterfaces.txt')
|
||||||
|
ipconfig /all | Out-File -FilePath (Join-Path $logfolderPath 'IPConfiguration.txt')
|
||||||
|
|
||||||
|
Write-Host 'Network configuration collection completed.'
|
||||||
|
} catch {
|
||||||
|
Write-Warning "Failed to collect network configuration: $_"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function Export-WindowsMemoryDump {
|
||||||
|
$memoryDumpPaths = @("$env:SystemRoot\MEMORY.DMP", "$env:SystemRoot\Minidump")
|
||||||
|
|
||||||
|
foreach ($dump in $memoryDumpPaths) {
|
||||||
|
Copy-Item -Path $dump -Destination $dumpfolderPath -Recurse -ErrorAction SilentlyContinue
|
||||||
|
}
|
||||||
|
Write-Host 'Windows memory dump collection completed.'
|
||||||
|
}
|
||||||
|
|
||||||
|
function Write-InformationToArchive {
|
||||||
|
param (
|
||||||
|
[string]$FolderPath,
|
||||||
|
[string]$SubFolderPath,
|
||||||
|
[string]$ArchiveFileName
|
||||||
|
)
|
||||||
|
try {
|
||||||
|
$archivePath = Join-Path -Path $FolderPath -ChildPath "$ArchiveFileName.zip"
|
||||||
|
Compress-Files -SourcePath $SubFolderPath -DestinationPath $archivePath
|
||||||
|
Write-Host "Archiving completed ($ArchiveFileName.zip)."
|
||||||
|
} catch {
|
||||||
|
Write-Warning "Failed to archive ($ArchiveFileName.zip): $_"
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
function StopTranscriptAndCloseFile {
|
||||||
|
if ($transcriptStarted) {
|
||||||
|
Stop-Transcript | Out-Null
|
||||||
|
$transcriptStarted = $false
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
$validParams = @('IncludeSensitiveData', 'Help')
|
||||||
|
if ($Help -or $args -contains '-?' -or $args -contains '--Help') {
|
||||||
|
Show-Help
|
||||||
|
return
|
||||||
|
}
|
||||||
|
|
||||||
|
foreach ($param in $args) {
|
||||||
|
if ($param -notlike '-*' -or ($param -like '-*' -and $validParams -notcontains $param.TrimStart('-'))) {
|
||||||
|
Write-Host "A parameter cannot be found that matches parameter name '$param'"
|
||||||
|
Show-Help
|
||||||
|
return
|
||||||
|
}
|
||||||
|
}
|
||||||
|
|
||||||
|
$breakHandler = {
|
||||||
|
Write-Host "Script interrupted by user. Stopping transcript..."
|
||||||
|
StopTranscriptAndCloseFile
|
||||||
|
exit
|
||||||
|
}
|
||||||
|
Register-EngineEvent -SourceIdentifier ConsoleBreak -Action $breakHandler | Out-Null
|
||||||
|
Register-EngineEvent -SourceIdentifier PowerShell.Exiting -Action $breakHandler | Out-Null
|
||||||
|
|
||||||
|
$timestamp = Get-Date -Format 'yyyy-MM-dd_HH-mm-ss'
|
||||||
|
$folderName = "SystemInfo_$timestamp"
|
||||||
|
$logfolderName = "Log_folder_$timestamp"
|
||||||
|
$dumpfolderName = "Dump_folder_$timestamp"
|
||||||
|
$folderPath = Join-Path -Path (Get-Location) -ChildPath $folderName
|
||||||
|
$logfolderPath = Join-Path -Path $folderPath -ChildPath $logfolderName
|
||||||
|
$dumpfolderPath = Join-Path -Path $folderPath -ChildPath $dumpfolderName
|
||||||
|
$progressFile = "$folderPath\Collecting_Status.txt"
|
||||||
|
New-Item -Path $logfolderPath -ItemType Directory | Out-Null
|
||||||
|
New-Item -Path $progressFile -ItemType File | Out-Null
|
||||||
|
Write-Host "Starting system info collecting into $folderPath"
|
||||||
|
Write-Output "Log folder path: $logfolderPath"
|
||||||
|
|
||||||
|
try {
|
||||||
|
Start-Transcript -Path $progressFile -Append
|
||||||
|
$transcriptStarted = $true
|
||||||
|
Export-SystemConfiguration
|
||||||
|
Export-EventLogs
|
||||||
|
Export-DriversList
|
||||||
|
Export-VirtioWinStorageDrivers
|
||||||
|
Export-WindowsUpdateLogs
|
||||||
|
Export-ServicesList
|
||||||
|
Export-WindowsUptime
|
||||||
|
Export-RunningProcesses
|
||||||
|
Export-InstalledApplications
|
||||||
|
Export-InstalledKBs
|
||||||
|
Export-NetworkConfiguration
|
||||||
|
|
||||||
|
if ($IncludeSensitiveData) {
|
||||||
|
Write-Output "Dump folder path: $dumpfolderPath"
|
||||||
|
New-Item -Path $dumpfolderPath -ItemType Directory | Out-Null
|
||||||
|
Export-WindowsMemoryDump
|
||||||
|
}
|
||||||
|
} catch {
|
||||||
|
$errorMsg = "An error occurred: $_"
|
||||||
|
Write-Host $errorMsg
|
||||||
|
Add-Content -Path $progressFile -Value $errorMsg
|
||||||
|
} finally {
|
||||||
|
StopTranscriptAndCloseFile
|
||||||
|
Unregister-Event -SourceIdentifier ConsoleBreak
|
||||||
|
Unregister-Event -SourceIdentifier PowerShell.Exiting
|
||||||
|
}
|
||||||
|
|
||||||
|
Remove-Item -Path $progressFile -ErrorAction SilentlyContinue
|
||||||
|
Write-InformationToArchive -FolderPath $folderPath -SubFolderPath $logfolderPath -ArchiveFileName $logfolderName
|
||||||
|
if ($IncludeSensitiveData) {
|
||||||
|
Write-InformationToArchive -FolderPath $folderPath -SubFolderPath $dumpfolderPath -ArchiveFileName $dumpfolderName
|
||||||
|
}
|
@ -0,0 +1,28 @@
|
|||||||
|
Copyright 2024 Red Hat, Inc. and/or its affiliates.
|
||||||
|
|
||||||
|
Redistribution and use in source and binary forms, with or without
|
||||||
|
modification, are permitted provided that the following conditions
|
||||||
|
are met:
|
||||||
|
|
||||||
|
Redistributions of source code must retain the above copyright
|
||||||
|
notice, this list of conditions and the following disclaimer.
|
||||||
|
|
||||||
|
Redistributions in binary form must reproduce the above copyright
|
||||||
|
notice, this list of conditions and the following disclaimer in the
|
||||||
|
documentation and/or other materials provided with the distribution.
|
||||||
|
|
||||||
|
Neither the name of the copyright holder nor the names of its
|
||||||
|
contributors may be used to endorse or promote products derived from
|
||||||
|
this software without specific prior written permission.
|
||||||
|
|
||||||
|
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
||||||
|
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
||||||
|
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
|
||||||
|
A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
|
||||||
|
HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
||||||
|
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
|
||||||
|
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
|
||||||
|
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
|
||||||
|
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
||||||
|
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
||||||
|
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
@ -0,0 +1,55 @@
|
|||||||
|
# CollectSystemInfo
|
||||||
|
|
||||||
|
## Overview
|
||||||
|
|
||||||
|
This PowerShell script is designed for comprehensive system diagnostics. It gathers a wide range of information, including system configuration, event logs, drivers, registry settings, update logs, services, uptime, processes, installed applications, installed KBs (knowledge base articles), network configuration, and optionally, memory dumps.
|
||||||
|
|
||||||
|
The collected data is organized into two subfolders within the time-stamped summary folder, one for log and the other for dump. and then compressed into two ZIP archives correspondingly for easy sharing and analysis.
|
||||||
|
|
||||||
|
## Usage
|
||||||
|
|
||||||
|
1. **Prerequisites:**
|
||||||
|
- PowerShell (Windows 10/Windows Server 2016 or later)
|
||||||
|
- Administrative privileges (for collecting event logs)
|
||||||
|
- Ensure the script runs with an unrestricted execution policy (for Windows 10 and Windows Server 2016):
|
||||||
|
```powershell
|
||||||
|
Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope Process -Force
|
||||||
|
```
|
||||||
|
|
||||||
|
2. **Running the Script:**
|
||||||
|
- Open PowerShell as an administrator.
|
||||||
|
- Navigate to the script's directory.
|
||||||
|
- Execute the script:
|
||||||
|
```powershell
|
||||||
|
.\CollectSystemInfo.ps1 -IncludeSensitiveData
|
||||||
|
```
|
||||||
|
- `-IncludeSensitiveData`: Optional switch to include memory dumps in the collection (use with caution).
|
||||||
|
- `-Help`: Provide basic usage of the script.
|
||||||
|
|
||||||
|
3. **Output:**
|
||||||
|
- A folder named `SystemInfo_YYYY-MM-DD_HH-MM-SS` will be created in the script's directory.
|
||||||
|
- This folder contains the collected data folders:
|
||||||
|
- A foler named `Log_folder_YYYY-MM-DD_HH-MM-SS` will be created for log data.
|
||||||
|
- A ZIP archive named `Log_folder_YYYY-MM-DD_HH-MM-SS.zip` will also be created correspondingly.
|
||||||
|
- A foler named `Dump_folder_YYYY-MM-DD_HH-MM-SS` will be created for dump files if add param `-IncludeSensitiveData`.
|
||||||
|
- A ZIP archive named `Dump_folder_YYYY-MM-DD_HH-MM-SS.zip` will also be created correspondingly.
|
||||||
|
|
||||||
|
## Data Collected
|
||||||
|
|
||||||
|
- `msinfo32.txt`: Detailed hardware and software configuration report.
|
||||||
|
- `system.evtx`, `security.evtx`, `application.evtx`: System, Security, and Application event logs.
|
||||||
|
- `drv_list.csv`: List of all installed drivers.
|
||||||
|
- `virtio_disk.txt`: Specific configuration details for Virtio-Win storage drivers.
|
||||||
|
- `WindowsUpdate.log`: Detailed logs of Windows Update activity.
|
||||||
|
- `Services.csv`: List of services and their status.
|
||||||
|
- `WindowsUptime.txt`: Duration since the last system boot.
|
||||||
|
- `RunningProcesses.csv`: Snapshot of active processes.
|
||||||
|
- `InstalledApplications.csv`: List of installed applications.
|
||||||
|
- `InstalledKBs.csv`: List of installed Windows updates.
|
||||||
|
- `NetworkInterfaces.txt` and `IPConfiguration.txt`: Network configuration details.
|
||||||
|
- `MEMORY.DMP` and `Minidump` folder: Full or mini memory dumps (if `-IncludeSensitiveData` is used).
|
||||||
|
- `Collecting_Status.txt`: Generated during data collection and deleted after completion. If the script is interrupted, this file indicates incomplete data collection.
|
||||||
|
|
||||||
|
## Contributing
|
||||||
|
|
||||||
|
Contributions are welcome! Feel free to open issues or submit pull requests.
|
@ -0,0 +1,114 @@
|
|||||||
|
|Driver Name |Build|Windows OS |
|
||||||
|
|-------------|-----|--------------------------|
|
||||||
|
| | | |
|
||||||
|
|viofs | 266 |Windows 10 (22H2) |
|
||||||
|
| | 266 |Windows 11 (24H2) 26100 |
|
||||||
|
| | 266 |Windows server 2016 |
|
||||||
|
| | 266 |Windows server 2019 |
|
||||||
|
| | 266 |Windows server 2022 |
|
||||||
|
| | 266 |Windows server 2025(26100)|
|
||||||
|
| | | |
|
||||||
|
|viostor | 266 |Windows 10 (22H2) |
|
||||||
|
| | 266 |Windows 11 (24H2) 26100 |
|
||||||
|
| | 266 |Windows server 2016 |
|
||||||
|
| | 266 |Windows server 2019 |
|
||||||
|
| | 266 |Windows server 2022 |
|
||||||
|
| | 266 |Windows server 2025(26100)|
|
||||||
|
| | | |
|
||||||
|
|vioscsi | 266 |Windows 10 (22H2) |
|
||||||
|
| | 266 |Windows 11 (24H2) 26100 |
|
||||||
|
| | 266 |Windows server 2016 |
|
||||||
|
| | 266 |Windows server 2019 |
|
||||||
|
| | 266 |Windows server 2022 |
|
||||||
|
| | 266 |Windows server 2025(26100)|
|
||||||
|
| | | |
|
||||||
|
|viorng | 266 |Windows 10 (22H2) |
|
||||||
|
| | 266 |Windows 11 (24H2) 26100 |
|
||||||
|
| | 266 |Windows server 2016 |
|
||||||
|
| | 266 |Windows server 2019 |
|
||||||
|
| | 266 |Windows server 2022 |
|
||||||
|
| | 266 |Windows server 2025(26100)|
|
||||||
|
| | | |
|
||||||
|
|balloon | 266 |Windows 10 (22H2) |
|
||||||
|
| | 266 |Windows 11 (24H2) 26100 |
|
||||||
|
| | 266 |Windows server 2016 |
|
||||||
|
| | 266 |Windows server 2019 |
|
||||||
|
| | 266 |Windows server 2022 |
|
||||||
|
| | 266 |Windows server 2025(26100)|
|
||||||
|
| | | |
|
||||||
|
|fwcfg | 266 |Windows 10 (22H2) |
|
||||||
|
| | 266 |Windows 11 (24H2) 26100 |
|
||||||
|
| | 266 |Windows server 2016 |
|
||||||
|
| | 266 |Windows server 2019 |
|
||||||
|
| | 266 |Windows server 2022 |
|
||||||
|
| | 266 |Windows server 2025(26100)|
|
||||||
|
| | | |
|
||||||
|
|pvpanic | 266 |Windows 10 (22H2) |
|
||||||
|
| | 266 |Windows 11 (24H2) 26100 |
|
||||||
|
| | 266 |Windows server 2016 |
|
||||||
|
| | 266 |Windows server 2019 |
|
||||||
|
| | 266 |Windows server 2022 |
|
||||||
|
| | 266 |Windows server 2025(26100)|
|
||||||
|
| | | |
|
||||||
|
|viofs | 266 |Windows 10 (22H2) |
|
||||||
|
| | 266 |Windows 11 (24H2) 26100 |
|
||||||
|
| | 266 |Windows server 2016 |
|
||||||
|
| | 266 |Windows server 2019 |
|
||||||
|
| | 266 |Windows server 2022 |
|
||||||
|
| | 266 |Windows server 2025(26100)|
|
||||||
|
| | | |
|
||||||
|
|vioinput | 266 |Windows 10 (22H2) |
|
||||||
|
| | 266 |Windows 11 (24H2) 26100 |
|
||||||
|
| | 266 |Windows server 2016 |
|
||||||
|
| | 266 |Windows server 2019 |
|
||||||
|
| | 266 |Windows server 2022 |
|
||||||
|
| | 266 |Windows server 2025(26100)|
|
||||||
|
| | | |
|
||||||
|
|vioserial | 266 |Windows 10 (22H2) |
|
||||||
|
| | 266 |Windows 11 (24H2) 26100 |
|
||||||
|
| | 266 |Windows server 2016 |
|
||||||
|
| | 266 |Windows server 2019 |
|
||||||
|
| | 266 |Windows server 2022 |
|
||||||
|
| | 266 |Windows server 2025(26100)|
|
||||||
|
| | | |
|
||||||
|
|viogpudo | 266 |Windows 10 (22H2) |
|
||||||
|
| | 266 |Windows 11 (24H2) 26100 |
|
||||||
|
| | 266 |Windows server 2016 |
|
||||||
|
| | 266 |Windows server 2019 |
|
||||||
|
| | 266 |Windows server 2022 |
|
||||||
|
| | 266 |Windows server 2025(26100)|
|
||||||
|
| | | |
|
||||||
|
|NetKVM | 266 |Windows 10 (22H2) |
|
||||||
|
| | 266 |Windows 11 (24H2) 26100 |
|
||||||
|
| | 266 |Windows server 2016 |
|
||||||
|
| | 266 |Windows server 2019 |
|
||||||
|
| | 266 |Windows server 2022 |
|
||||||
|
| | 266 |Windows server 2025(26100)|
|
||||||
|
| | | |
|
||||||
|
|viomem | 266 |Windows 10 (22H2) |
|
||||||
|
| | 266 |Windows 11 (24H2) 26100 |
|
||||||
|
| | 266 |Windows server 2016 |
|
||||||
|
| | 266 |Windows server 2019 |
|
||||||
|
| | 266 |Windows server 2022 |
|
||||||
|
| | 266 |Windows server 2025(26100)|
|
||||||
|
| | | |
|
||||||
|
|qemupciserial| 221 |Windows 10 (22H2) |
|
||||||
|
| | 221 |Windows 11 (24H2) 26100 |
|
||||||
|
| | 221 |Windows server 2016 |
|
||||||
|
| | 221 |Windows server 2019 |
|
||||||
|
| | 221 |Windows server 2022 |
|
||||||
|
| | 221 |Windows server 2025(26100)|
|
||||||
|
| | | |
|
||||||
|
|qemufwcfg | 221 |Windows 10 (22H2) |
|
||||||
|
| | 221 |Windows 11 (24H2) 26100 |
|
||||||
|
| | 221 |Windows server 2016 |
|
||||||
|
| | 221 |Windows server 2019 |
|
||||||
|
| | 221 |Windows server 2022 |
|
||||||
|
| | 221 |Windows server 2025(26100)|
|
||||||
|
| | | |
|
||||||
|
|smbus | 221 |Windows 10 (22H2) |
|
||||||
|
| | 221 |Windows 11 (24H2) 26100 |
|
||||||
|
| | 221 |Windows server 2016 |
|
||||||
|
| | 221 |Windows server 2019 |
|
||||||
|
| | 221 |Windows server 2022 |
|
||||||
|
| | 221 |Windows server 2025(26100)|
|
Loading…
Reference in new issue