Obtaining and viewing a list of executable files stored on client devices

You can obtain the list of executable files stored on client devices in one of the following ways:

Enabling notifications about applications startup in Kaspersky Endpoint Security policy

To enable notifications about applications startup:

  1. Open the Kaspersky Endpoint Security policy settings, and then go to General settings → Reports and Storage.
  2. In the Data transfer to Administration Server settings group, select the About started applications check box, and save the changes.

When a user attempts to start executable files, information about these files is added to the list of executable files on a client device. Kaspersky Endpoint Security sends this information to Network Agent, and then Network Agent sends it to Administration Server.

Creating an inventory task

The feature of inventorying executable files is available for the following applications:

You can reduce load on the database while obtaining information about the installed applications. To save a space, run an inventory task on reference devices on which a standard set of software is installed. The preferable number of devices is 1-3.

We strongly do not recommend running the inventory task when using the following databases: MySQL, PostgreSQL, SQL Server Express Edition, MariaDB (all editions).

To create an inventory task for executable files on client devices:

  1. In the console tree, select the Tasks folder.
  2. In the workspace of the Tasks folder, click the New task button.

    The New task wizard starts.

  3. In the Select the task type window of the wizard, select Kaspersky Endpoint Security as the task type, and then select Inventory as the task subtype, and click Next.
  4. Follow the rest of the wizard instructions.

After the New task wizard has finished, the Inventory task is created and configured. If you want, you can change the settings for the created task. The newly created task is displayed in the list of tasks. If you want, you can change the settings for the created task.

For a detailed description of the inventory task, refer to the following Helps:

After the Inventory task is performed, the list of executable files stored on managed devices is formed, and you can view the list.

During inventory, executable files in the following formats can be detected (depending on the option that you select in the inventory task properties): MZ, COM, PE, NE, SYS, CMD, BAT, PS1, JS, VBS, REG, MSI, CPL, DLL, JAR, and HTML.

Viewing the list of executable files stored on managed devices

To view the list of executable files stored on client devices:

In the console tree, go to Advanced → Application management → Executable files.

If necessary, you can send an executable file from a managed device to the device with Administration Console installed.

To send an executable file:

  1. In the console tree, go to Advanced → Application management → Executable files.
  2. Click the link of the executable file that you want to send to the device with Administration Console installed.
  3. In the window that opens, go to the Devices section, and then select the check box of the managed device from which you want to send the executable file.

    Before you send the executable file, make sure that the managed device has a direct connection to the Administration Server, by selecting the Do not disconnect from the Administration Server check box.

  4. Click the Send button, select the destination folder, and then click OK.

The selected executable file is downloaded for further sending to the device with Administration Console installed.

Page top