Hello guys I got a question,
How to determine when there is a program installed on Windows Server 2008?
I look at my logs, at application logs, but don't see when I install something like for example WinSCP.
I want these logs so i can alert in Splunk when someone installs a software product.
Anyone that can help me?
Hi nickbijmoer
in Splunk_TA-Windows there is a scripted inputs (win_installed_apps.bat) that gives to you the list of all installed applications and the installation date.
Bye.
Giuseppe