Compare commits
No commits in common. 'cs10' and 'c9' have entirely different histories.
@ -1,16 +1,16 @@
|
||||
SOURCES/mingw-qemu-ga-win-108.0.2-1.el9.src.rpm
|
||||
SOURCES/qemu-ga-win-108.0.2-1.el9.noarch.rpm
|
||||
SOURCES/mingw-qemu-ga-win-106.0.1-1.el9.src.rpm
|
||||
SOURCES/qemu-ga-win-106.0.1-1.el9.noarch.rpm
|
||||
SOURCES/qxl-win-unsigned-0.1-24-sources.zip
|
||||
SOURCES/spice-qxl-wddm-dod-0.21-2.el8.noarch.rpm
|
||||
SOURCES/spice-qxl-wddm-dod-0.21-2.el8.src.rpm
|
||||
SOURCES/spice-vdagent-win-0.10.0-5.el8.src.rpm
|
||||
SOURCES/spice-vdagent-win-x64-0.10.0-5.el8.noarch.rpm
|
||||
SOURCES/spice-vdagent-win-x86-0.10.0-5.el8.noarch.rpm
|
||||
SOURCES/virtio-win-1.9.44-bin-for-rpm.tar.gz
|
||||
SOURCES/virtio-win-1.9.35-bin-for-rpm.tar.gz
|
||||
SOURCES/virtio-win-gt-x64.msi
|
||||
SOURCES/virtio-win-gt-x86.msi
|
||||
SOURCES/virtio-win-guest-tools.exe
|
||||
SOURCES/virtio-win-installer-1.9.44-0-sources.zip
|
||||
SOURCES/virtio-win-prewhql-0.1-266-sources.zip
|
||||
SOURCES/winfsp-2.0.23075-sources.zip
|
||||
SOURCES/winfsp-2.0.23075.msi
|
||||
SOURCES/virtio-win-installer-1.9.35-0-sources.zip
|
||||
SOURCES/virtio-win-prewhql-0.1-240-sources.zip
|
||||
SOURCES/winfsp-1.12.22339-sources.zip
|
||||
SOURCES/winfsp-1.12.22339.msi
|
||||
|
||||
@ -1,16 +1,16 @@
|
||||
2edafa2d96588ea5a559f1b29e9bf5669e505f02 SOURCES/mingw-qemu-ga-win-108.0.2-1.el9.src.rpm
|
||||
f3a5cf94bde206e52d084bd0cd6695adba4eb2fb SOURCES/qemu-ga-win-108.0.2-1.el9.noarch.rpm
|
||||
82c187edce788f5968c227cc1da3db001250c35d SOURCES/mingw-qemu-ga-win-106.0.1-1.el9.src.rpm
|
||||
27ab2810f7ad43b9a6348d10b2d09142ab0be776 SOURCES/qemu-ga-win-106.0.1-1.el9.noarch.rpm
|
||||
1cb09750a3a1965a147889f5db3ec7b8feb005b8 SOURCES/qxl-win-unsigned-0.1-24-sources.zip
|
||||
95dab7088166ba71366bcbcb099267d771d61661 SOURCES/spice-qxl-wddm-dod-0.21-2.el8.noarch.rpm
|
||||
055c8fe47a378ef48b89846ba9c2474238ad9aea SOURCES/spice-qxl-wddm-dod-0.21-2.el8.src.rpm
|
||||
085728c7db3503db1f7c8f1d264ca45b365d6837 SOURCES/spice-vdagent-win-0.10.0-5.el8.src.rpm
|
||||
fb35d3c12b9069133e651f54c35ae6ee68537959 SOURCES/spice-vdagent-win-x64-0.10.0-5.el8.noarch.rpm
|
||||
2d4bd6f8fb1b306f4d49a5a990e2da9c5f5baeac SOURCES/spice-vdagent-win-x86-0.10.0-5.el8.noarch.rpm
|
||||
fdb57fb57cfc64377c1c429ae919a1747b6e343c SOURCES/virtio-win-1.9.44-bin-for-rpm.tar.gz
|
||||
53b152b0ac65f73cde78afdaa2eef8fa927cce1b SOURCES/virtio-win-gt-x64.msi
|
||||
488d604e74ed568b0ff049c2e8ef054068849726 SOURCES/virtio-win-gt-x86.msi
|
||||
78a095ccc18d0c48e128f2f9227be4112bf43de1 SOURCES/virtio-win-guest-tools.exe
|
||||
438e7fed35c81b27a0d2a67cc67817d921db6f24 SOURCES/virtio-win-installer-1.9.44-0-sources.zip
|
||||
b4c7f106c95cd9ac7cae41b8d2b6906e6ad85932 SOURCES/virtio-win-prewhql-0.1-266-sources.zip
|
||||
8cbe79255a6749d23d5dec0d2cd51f22fb02a927 SOURCES/winfsp-2.0.23075-sources.zip
|
||||
89c1012ca71e4863d8f5329a7addfa05e0f51e62 SOURCES/winfsp-2.0.23075.msi
|
||||
e0cb9d972c38cec824cc4d84b54110ae54f5cfba SOURCES/virtio-win-1.9.35-bin-for-rpm.tar.gz
|
||||
756bab2368d28ec936af496a8a3e9723a50ffc35 SOURCES/virtio-win-gt-x64.msi
|
||||
33159bbbb6242fec2425634ab78472167580d206 SOURCES/virtio-win-gt-x86.msi
|
||||
97f1f48ec0ea0bb449dad57227b458024e7dd441 SOURCES/virtio-win-guest-tools.exe
|
||||
0621a23248ae02eba9d1efde00d6abd7196acfdf SOURCES/virtio-win-installer-1.9.35-0-sources.zip
|
||||
cb231b467e637e938529c5f75512cf1e6eb9ee8a SOURCES/virtio-win-prewhql-0.1-240-sources.zip
|
||||
151e6a4b1d429c5bbb768f4aee51055708832ae5 SOURCES/winfsp-1.12.22339-sources.zip
|
||||
ced3777f88438097ee0f4fc94ac951e4d2f2b602 SOURCES/winfsp-1.12.22339.msi
|
||||
|
||||
@ -1,288 +0,0 @@
|
||||
# This script collects various system information for diagnostic
|
||||
# purposes. The collected data includes system configuration,
|
||||
# event logs, driver lists, registry information, update logs,
|
||||
# services, uptime, running processes, installed applications,
|
||||
# installed KBs, and memory dumps.
|
||||
|
||||
# Copyright (c) 2024 Red Hat, Inc. and/or its affiliates. All rights reserved.
|
||||
|
||||
# Redistribution and use in source and binary forms, with or without
|
||||
# modification, are permitted provided that the following conditions
|
||||
# are met:
|
||||
# 1. Redistributions of source code must retain the above copyright
|
||||
# notice, this list of conditions and the following disclaimer.
|
||||
# 2. Redistributions in binary form must reproduce the above copyright
|
||||
# notice, this list of conditions and the following disclaimer in the
|
||||
# documentation and/or other materials provided with the distribution.
|
||||
# 3. Neither the names of the copyright holders nor the names of their contributors
|
||||
# may be used to endorse or promote products derived from this software
|
||||
# without specific prior written permission.
|
||||
# THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS "AS IS" AND
|
||||
# ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
|
||||
# IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
|
||||
# ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT HOLDERS OR CONTRIBUTORS BE LIABLE
|
||||
# FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
|
||||
# DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
|
||||
# OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
|
||||
# HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
|
||||
# LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
|
||||
# OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
|
||||
# SUCH DAMAGE.
|
||||
|
||||
|
||||
# Ensure the script runs with an unrestricted execution policy (for Windows 10 and Windows Server 2016)
|
||||
# Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope Process -Force
|
||||
|
||||
# For gathering event logs run the script as an administrator
|
||||
|
||||
# IncludeSensitiveData is used to include memory dumps add this parameter to your command line to collect them
|
||||
# Example: .\CollectSystemInfo.ps1 -IncludeSensitiveData
|
||||
|
||||
param (
|
||||
[switch]$IncludeSensitiveData,
|
||||
[switch]$Help
|
||||
)
|
||||
|
||||
Add-Type -AssemblyName 'System.IO.Compression.FileSystem'
|
||||
|
||||
function Compress-Files {
|
||||
param (
|
||||
[string]$SourcePath,
|
||||
[string]$DestinationPath
|
||||
)
|
||||
|
||||
[System.IO.Compression.ZipFile]::CreateFromDirectory($SourcePath, $DestinationPath)
|
||||
}
|
||||
|
||||
function Show-Help {
|
||||
Write-Host "Usage: .\CollectSystemInfo.ps1 [-IncludeSensitiveData] [-Help]"
|
||||
Write-Host ""
|
||||
Write-Host "Parameters:"
|
||||
Write-Host " -IncludeSensitiveData Include sensitive data (memory dump)"
|
||||
Write-Host " -Help Show this help message"
|
||||
Write-Host ""
|
||||
Write-Host "If no parameters are provided, the script will run with default behavior."
|
||||
}
|
||||
|
||||
function Export-SystemConfiguration {
|
||||
try {
|
||||
Write-Host 'Collecting system configuration started it may take a while...'
|
||||
Start-Process -FilePath 'msinfo32.exe' -ArgumentList '/report', (Join-Path $logfolderPath 'msinfo32.txt') -Wait
|
||||
Write-Host 'System configuration collection completed.'
|
||||
} catch {
|
||||
Write-Warning "Failed to collect system configuration: $_"
|
||||
}
|
||||
}
|
||||
|
||||
function Export-EventLogs {
|
||||
try {
|
||||
$logNames = @('system', 'security', 'application')
|
||||
foreach ($logName in $logNames) {
|
||||
$logPath = Join-Path $logfolderPath "$logName.evtx"
|
||||
wevtutil epl $logName $logPath
|
||||
wevtutil al $logPath
|
||||
}
|
||||
Write-Host 'Event logs collection completed.'
|
||||
} catch {
|
||||
Write-Warning "Failed to collect event logs: $_"
|
||||
}
|
||||
}
|
||||
|
||||
function Export-DriversList {
|
||||
try {
|
||||
Get-WindowsDriver -Online -All | Select-Object -Property * | Export-Csv -Path (Join-Path $logfolderPath 'drv_list.csv') -NoTypeInformation
|
||||
Write-Host 'Drivers list collection completed.'
|
||||
} catch {
|
||||
Write-Warning "Failed to collect drivers list: $_"
|
||||
}
|
||||
}
|
||||
|
||||
function Export-VirtioWinStorageDrivers {
|
||||
$registryPaths = @(
|
||||
'HKLM:\SYSTEM\CurrentControlSet\Services\Disk',
|
||||
'HKLM:\SYSTEM\CurrentControlSet\Services\viostor\Parameters',
|
||||
'HKLM:\SYSTEM\CurrentControlSet\Services\vioscsi\Parameters'
|
||||
)
|
||||
$valuesToQuery = @('IoTimeoutValue', 'TimeoutValue')
|
||||
|
||||
foreach ($path in $registryPaths) {
|
||||
foreach ($value in $valuesToQuery) {
|
||||
$property = Get-ItemProperty -Path $path -Name $value -ErrorAction SilentlyContinue
|
||||
$output = "$path\$value : $($property.$value)"
|
||||
$output | Out-File -FilePath (Join-Path $logfolderPath 'virtio_disk.txt') -Append
|
||||
}
|
||||
}
|
||||
Write-Host 'Virtio-Win storage drivers configuration collection completed.'
|
||||
}
|
||||
|
||||
function Export-WindowsUpdateLogs {
|
||||
try {
|
||||
$logPath = Join-Path $logfolderPath 'WindowsUpdate.log'
|
||||
$command = "Get-WindowsUpdateLog -LogPath '$logPath'"
|
||||
Start-Process -FilePath 'powershell.exe' -ArgumentList '-NoLogo', '-NoProfile', '-Command', $command -NoNewWindow -Wait -RedirectStandardOutput (Join-Path $logfolderPath 'OutputWindowsUpdate.log') -RedirectStandardError (Join-Path $logfolderPath 'ErrorWindowsUpdate.log')
|
||||
Write-Host 'Windows Update logs collection completed.'
|
||||
} catch {
|
||||
Write-Warning "Failed to collect Windows Update logs: $_"
|
||||
}
|
||||
}
|
||||
|
||||
function Export-WindowsUptime {
|
||||
try {
|
||||
$uptime = (Get-Date) - (gcim Win32_OperatingSystem).LastBootUpTime
|
||||
$uptime.ToString() | Out-File -FilePath (Join-Path $logfolderPath 'WindowsUptime.txt')
|
||||
Write-Host 'Windows uptime collection completed.'
|
||||
} catch {
|
||||
Write-Warning "Failed to collect Windows uptime: $_"
|
||||
}
|
||||
}
|
||||
|
||||
function Export-ServicesList {
|
||||
try {
|
||||
Get-Service | Select-Object -Property Name, DisplayName, Status, StartType | Export-Csv -Path (Join-Path $logfolderPath 'Services.csv') -NoTypeInformation
|
||||
Write-Host 'Services list collection completed.'
|
||||
} catch {
|
||||
Write-Warning "Failed to collect list of services: $_"
|
||||
}
|
||||
}
|
||||
|
||||
function Export-RunningProcesses {
|
||||
try {
|
||||
Get-Process | Select-Object -Property Id, ProcessName, StartTime | Export-Csv -Path (Join-Path $logfolderPath 'RunningProcesses.csv') -NoTypeInformation
|
||||
Write-Host 'Running processes collection completed.'
|
||||
} catch {
|
||||
Write-Warning "Failed to collect list of running processes: $_"
|
||||
}
|
||||
}
|
||||
|
||||
function Export-InstalledApplications {
|
||||
try {
|
||||
Get-ItemProperty -Path 'HKLM:\Software\Microsoft\Windows\CurrentVersion\Uninstall\*' |
|
||||
Select-Object -Property DisplayName, DisplayVersion, Publisher, InstallDate |
|
||||
Export-Csv -Path (Join-Path $logfolderPath 'InstalledApplications.csv') -NoTypeInformation
|
||||
Write-Host 'Installed applications collection completed.'
|
||||
} catch {
|
||||
Write-Warning "Failed to collect list of installed applications: $_"
|
||||
}
|
||||
}
|
||||
|
||||
function Export-InstalledKBs {
|
||||
try {
|
||||
Get-HotFix | Select-Object -Property Description, HotFixID, InstalledOn | Export-Csv -Path (Join-Path $logfolderPath 'InstalledKBs.csv') -NoTypeInformation
|
||||
Write-Host 'Installed KBs collection completed.'
|
||||
} catch {
|
||||
Write-Warning "Failed to collect list of installed KBs: $_"
|
||||
}
|
||||
}
|
||||
|
||||
function Export-NetworkConfiguration {
|
||||
try {
|
||||
Get-NetAdapterAdvancedProperty | Out-File -FilePath (Join-Path $logfolderPath 'NetworkInterfaces.txt')
|
||||
ipconfig /all | Out-File -FilePath (Join-Path $logfolderPath 'IPConfiguration.txt')
|
||||
|
||||
Write-Host 'Network configuration collection completed.'
|
||||
} catch {
|
||||
Write-Warning "Failed to collect network configuration: $_"
|
||||
}
|
||||
}
|
||||
|
||||
function Export-WindowsMemoryDump {
|
||||
$memoryDumpPaths = @("$env:SystemRoot\MEMORY.DMP", "$env:SystemRoot\Minidump")
|
||||
|
||||
foreach ($dump in $memoryDumpPaths) {
|
||||
Copy-Item -Path $dump -Destination $dumpfolderPath -Recurse -ErrorAction SilentlyContinue
|
||||
}
|
||||
Write-Host 'Windows memory dump collection completed.'
|
||||
}
|
||||
|
||||
function Write-InformationToArchive {
|
||||
param (
|
||||
[string]$FolderPath,
|
||||
[string]$SubFolderPath,
|
||||
[string]$ArchiveFileName
|
||||
)
|
||||
try {
|
||||
$archivePath = Join-Path -Path $FolderPath -ChildPath "$ArchiveFileName.zip"
|
||||
Compress-Files -SourcePath $SubFolderPath -DestinationPath $archivePath
|
||||
Write-Host "Archiving completed ($ArchiveFileName.zip)."
|
||||
} catch {
|
||||
Write-Warning "Failed to archive ($ArchiveFileName.zip): $_"
|
||||
}
|
||||
}
|
||||
|
||||
function StopTranscriptAndCloseFile {
|
||||
if ($transcriptStarted) {
|
||||
Stop-Transcript | Out-Null
|
||||
$transcriptStarted = $false
|
||||
}
|
||||
}
|
||||
|
||||
$validParams = @('IncludeSensitiveData', 'Help')
|
||||
if ($Help -or $args -contains '-?' -or $args -contains '--Help') {
|
||||
Show-Help
|
||||
return
|
||||
}
|
||||
|
||||
foreach ($param in $args) {
|
||||
if ($param -notlike '-*' -or ($param -like '-*' -and $validParams -notcontains $param.TrimStart('-'))) {
|
||||
Write-Host "A parameter cannot be found that matches parameter name '$param'"
|
||||
Show-Help
|
||||
return
|
||||
}
|
||||
}
|
||||
|
||||
$breakHandler = {
|
||||
Write-Host "Script interrupted by user. Stopping transcript..."
|
||||
StopTranscriptAndCloseFile
|
||||
exit
|
||||
}
|
||||
Register-EngineEvent -SourceIdentifier ConsoleBreak -Action $breakHandler | Out-Null
|
||||
Register-EngineEvent -SourceIdentifier PowerShell.Exiting -Action $breakHandler | Out-Null
|
||||
|
||||
$timestamp = Get-Date -Format 'yyyy-MM-dd_HH-mm-ss'
|
||||
$folderName = "SystemInfo_$timestamp"
|
||||
$logfolderName = "Log_folder_$timestamp"
|
||||
$dumpfolderName = "Dump_folder_$timestamp"
|
||||
$folderPath = Join-Path -Path (Get-Location) -ChildPath $folderName
|
||||
$logfolderPath = Join-Path -Path $folderPath -ChildPath $logfolderName
|
||||
$dumpfolderPath = Join-Path -Path $folderPath -ChildPath $dumpfolderName
|
||||
$progressFile = "$folderPath\Collecting_Status.txt"
|
||||
New-Item -Path $logfolderPath -ItemType Directory | Out-Null
|
||||
New-Item -Path $progressFile -ItemType File | Out-Null
|
||||
Write-Host "Starting system info collecting into $folderPath"
|
||||
Write-Output "Log folder path: $logfolderPath"
|
||||
|
||||
try {
|
||||
Start-Transcript -Path $progressFile -Append
|
||||
$transcriptStarted = $true
|
||||
Export-SystemConfiguration
|
||||
Export-EventLogs
|
||||
Export-DriversList
|
||||
Export-VirtioWinStorageDrivers
|
||||
Export-WindowsUpdateLogs
|
||||
Export-ServicesList
|
||||
Export-WindowsUptime
|
||||
Export-RunningProcesses
|
||||
Export-InstalledApplications
|
||||
Export-InstalledKBs
|
||||
Export-NetworkConfiguration
|
||||
|
||||
if ($IncludeSensitiveData) {
|
||||
Write-Output "Dump folder path: $dumpfolderPath"
|
||||
New-Item -Path $dumpfolderPath -ItemType Directory | Out-Null
|
||||
Export-WindowsMemoryDump
|
||||
}
|
||||
} catch {
|
||||
$errorMsg = "An error occurred: $_"
|
||||
Write-Host $errorMsg
|
||||
Add-Content -Path $progressFile -Value $errorMsg
|
||||
} finally {
|
||||
StopTranscriptAndCloseFile
|
||||
Unregister-Event -SourceIdentifier ConsoleBreak
|
||||
Unregister-Event -SourceIdentifier PowerShell.Exiting
|
||||
}
|
||||
|
||||
Remove-Item -Path $progressFile -ErrorAction SilentlyContinue
|
||||
Write-InformationToArchive -FolderPath $folderPath -SubFolderPath $logfolderPath -ArchiveFileName $logfolderName
|
||||
if ($IncludeSensitiveData) {
|
||||
Write-InformationToArchive -FolderPath $folderPath -SubFolderPath $dumpfolderPath -ArchiveFileName $dumpfolderName
|
||||
}
|
||||
@ -1,28 +0,0 @@
|
||||
Copyright 2024 Red Hat, Inc. and/or its affiliates.
|
||||
|
||||
Redistribution and use in source and binary forms, with or without
|
||||
modification, are permitted provided that the following conditions
|
||||
are met:
|
||||
|
||||
Redistributions of source code must retain the above copyright
|
||||
notice, this list of conditions and the following disclaimer.
|
||||
|
||||
Redistributions in binary form must reproduce the above copyright
|
||||
notice, this list of conditions and the following disclaimer in the
|
||||
documentation and/or other materials provided with the distribution.
|
||||
|
||||
Neither the name of the copyright holder nor the names of its
|
||||
contributors may be used to endorse or promote products derived from
|
||||
this software without specific prior written permission.
|
||||
|
||||
THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
|
||||
"AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
|
||||
LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
|
||||
A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
|
||||
HOLDER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
|
||||
SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
|
||||
LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
|
||||
DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
|
||||
THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
|
||||
(INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
|
||||
OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
|
||||
@ -1,55 +0,0 @@
|
||||
# CollectSystemInfo
|
||||
|
||||
## Overview
|
||||
|
||||
This PowerShell script is designed for comprehensive system diagnostics. It gathers a wide range of information, including system configuration, event logs, drivers, registry settings, update logs, services, uptime, processes, installed applications, installed KBs (knowledge base articles), network configuration, and optionally, memory dumps.
|
||||
|
||||
The collected data is organized into two subfolders within the time-stamped summary folder, one for log and the other for dump. and then compressed into two ZIP archives correspondingly for easy sharing and analysis.
|
||||
|
||||
## Usage
|
||||
|
||||
1. **Prerequisites:**
|
||||
- PowerShell (Windows 10/Windows Server 2016 or later)
|
||||
- Administrative privileges (for collecting event logs)
|
||||
- Ensure the script runs with an unrestricted execution policy (for Windows 10 and Windows Server 2016):
|
||||
```powershell
|
||||
Set-ExecutionPolicy -ExecutionPolicy Unrestricted -Scope Process -Force
|
||||
```
|
||||
|
||||
2. **Running the Script:**
|
||||
- Open PowerShell as an administrator.
|
||||
- Navigate to the script's directory.
|
||||
- Execute the script:
|
||||
```powershell
|
||||
.\CollectSystemInfo.ps1 -IncludeSensitiveData
|
||||
```
|
||||
- `-IncludeSensitiveData`: Optional switch to include memory dumps in the collection (use with caution).
|
||||
- `-Help`: Provide basic usage of the script.
|
||||
|
||||
3. **Output:**
|
||||
- A folder named `SystemInfo_YYYY-MM-DD_HH-MM-SS` will be created in the script's directory.
|
||||
- This folder contains the collected data folders:
|
||||
- A foler named `Log_folder_YYYY-MM-DD_HH-MM-SS` will be created for log data.
|
||||
- A ZIP archive named `Log_folder_YYYY-MM-DD_HH-MM-SS.zip` will also be created correspondingly.
|
||||
- A foler named `Dump_folder_YYYY-MM-DD_HH-MM-SS` will be created for dump files if add param `-IncludeSensitiveData`.
|
||||
- A ZIP archive named `Dump_folder_YYYY-MM-DD_HH-MM-SS.zip` will also be created correspondingly.
|
||||
|
||||
## Data Collected
|
||||
|
||||
- `msinfo32.txt`: Detailed hardware and software configuration report.
|
||||
- `system.evtx`, `security.evtx`, `application.evtx`: System, Security, and Application event logs.
|
||||
- `drv_list.csv`: List of all installed drivers.
|
||||
- `virtio_disk.txt`: Specific configuration details for Virtio-Win storage drivers.
|
||||
- `WindowsUpdate.log`: Detailed logs of Windows Update activity.
|
||||
- `Services.csv`: List of services and their status.
|
||||
- `WindowsUptime.txt`: Duration since the last system boot.
|
||||
- `RunningProcesses.csv`: Snapshot of active processes.
|
||||
- `InstalledApplications.csv`: List of installed applications.
|
||||
- `InstalledKBs.csv`: List of installed Windows updates.
|
||||
- `NetworkInterfaces.txt` and `IPConfiguration.txt`: Network configuration details.
|
||||
- `MEMORY.DMP` and `Minidump` folder: Full or mini memory dumps (if `-IncludeSensitiveData` is used).
|
||||
- `Collecting_Status.txt`: Generated during data collection and deleted after completion. If the script is interrupted, this file indicates incomplete data collection.
|
||||
|
||||
## Contributing
|
||||
|
||||
Contributions are welcome! Feel free to open issues or submit pull requests.
|
||||
@ -1,114 +0,0 @@
|
||||
|Driver Name |Build|Windows OS |
|
||||
|-------------|-----|--------------------------|
|
||||
| | | |
|
||||
|viofs | 266 |Windows 10 (22H2) |
|
||||
| | 266 |Windows 11 (24H2) 26100 |
|
||||
| | 266 |Windows server 2016 |
|
||||
| | 266 |Windows server 2019 |
|
||||
| | 266 |Windows server 2022 |
|
||||
| | 266 |Windows server 2025(26100)|
|
||||
| | | |
|
||||
|viostor | 266 |Windows 10 (22H2) |
|
||||
| | 266 |Windows 11 (24H2) 26100 |
|
||||
| | 266 |Windows server 2016 |
|
||||
| | 266 |Windows server 2019 |
|
||||
| | 266 |Windows server 2022 |
|
||||
| | 266 |Windows server 2025(26100)|
|
||||
| | | |
|
||||
|vioscsi | 266 |Windows 10 (22H2) |
|
||||
| | 266 |Windows 11 (24H2) 26100 |
|
||||
| | 266 |Windows server 2016 |
|
||||
| | 266 |Windows server 2019 |
|
||||
| | 266 |Windows server 2022 |
|
||||
| | 266 |Windows server 2025(26100)|
|
||||
| | | |
|
||||
|viorng | 266 |Windows 10 (22H2) |
|
||||
| | 266 |Windows 11 (24H2) 26100 |
|
||||
| | 266 |Windows server 2016 |
|
||||
| | 266 |Windows server 2019 |
|
||||
| | 266 |Windows server 2022 |
|
||||
| | 266 |Windows server 2025(26100)|
|
||||
| | | |
|
||||
|balloon | 266 |Windows 10 (22H2) |
|
||||
| | 266 |Windows 11 (24H2) 26100 |
|
||||
| | 266 |Windows server 2016 |
|
||||
| | 266 |Windows server 2019 |
|
||||
| | 266 |Windows server 2022 |
|
||||
| | 266 |Windows server 2025(26100)|
|
||||
| | | |
|
||||
|fwcfg | 266 |Windows 10 (22H2) |
|
||||
| | 266 |Windows 11 (24H2) 26100 |
|
||||
| | 266 |Windows server 2016 |
|
||||
| | 266 |Windows server 2019 |
|
||||
| | 266 |Windows server 2022 |
|
||||
| | 266 |Windows server 2025(26100)|
|
||||
| | | |
|
||||
|pvpanic | 266 |Windows 10 (22H2) |
|
||||
| | 266 |Windows 11 (24H2) 26100 |
|
||||
| | 266 |Windows server 2016 |
|
||||
| | 266 |Windows server 2019 |
|
||||
| | 266 |Windows server 2022 |
|
||||
| | 266 |Windows server 2025(26100)|
|
||||
| | | |
|
||||
|viofs | 266 |Windows 10 (22H2) |
|
||||
| | 266 |Windows 11 (24H2) 26100 |
|
||||
| | 266 |Windows server 2016 |
|
||||
| | 266 |Windows server 2019 |
|
||||
| | 266 |Windows server 2022 |
|
||||
| | 266 |Windows server 2025(26100)|
|
||||
| | | |
|
||||
|vioinput | 266 |Windows 10 (22H2) |
|
||||
| | 266 |Windows 11 (24H2) 26100 |
|
||||
| | 266 |Windows server 2016 |
|
||||
| | 266 |Windows server 2019 |
|
||||
| | 266 |Windows server 2022 |
|
||||
| | 266 |Windows server 2025(26100)|
|
||||
| | | |
|
||||
|vioserial | 266 |Windows 10 (22H2) |
|
||||
| | 266 |Windows 11 (24H2) 26100 |
|
||||
| | 266 |Windows server 2016 |
|
||||
| | 266 |Windows server 2019 |
|
||||
| | 266 |Windows server 2022 |
|
||||
| | 266 |Windows server 2025(26100)|
|
||||
| | | |
|
||||
|viogpudo | 266 |Windows 10 (22H2) |
|
||||
| | 266 |Windows 11 (24H2) 26100 |
|
||||
| | 266 |Windows server 2016 |
|
||||
| | 266 |Windows server 2019 |
|
||||
| | 266 |Windows server 2022 |
|
||||
| | 266 |Windows server 2025(26100)|
|
||||
| | | |
|
||||
|NetKVM | 266 |Windows 10 (22H2) |
|
||||
| | 266 |Windows 11 (24H2) 26100 |
|
||||
| | 266 |Windows server 2016 |
|
||||
| | 266 |Windows server 2019 |
|
||||
| | 266 |Windows server 2022 |
|
||||
| | 266 |Windows server 2025(26100)|
|
||||
| | | |
|
||||
|viomem | 266 |Windows 10 (22H2) |
|
||||
| | 266 |Windows 11 (24H2) 26100 |
|
||||
| | 266 |Windows server 2016 |
|
||||
| | 266 |Windows server 2019 |
|
||||
| | 266 |Windows server 2022 |
|
||||
| | 266 |Windows server 2025(26100)|
|
||||
| | | |
|
||||
|qemupciserial| 221 |Windows 10 (22H2) |
|
||||
| | 221 |Windows 11 (24H2) 26100 |
|
||||
| | 221 |Windows server 2016 |
|
||||
| | 221 |Windows server 2019 |
|
||||
| | 221 |Windows server 2022 |
|
||||
| | 221 |Windows server 2025(26100)|
|
||||
| | | |
|
||||
|qemufwcfg | 221 |Windows 10 (22H2) |
|
||||
| | 221 |Windows 11 (24H2) 26100 |
|
||||
| | 221 |Windows server 2016 |
|
||||
| | 221 |Windows server 2019 |
|
||||
| | 221 |Windows server 2022 |
|
||||
| | 221 |Windows server 2025(26100)|
|
||||
| | | |
|
||||
|smbus | 221 |Windows 10 (22H2) |
|
||||
| | 221 |Windows 11 (24H2) 26100 |
|
||||
| | 221 |Windows server 2016 |
|
||||
| | 221 |Windows server 2019 |
|
||||
| | 221 |Windows server 2022 |
|
||||
| | 221 |Windows server 2025(26100)|
|
||||
Loading…
Reference in new issue