Classify and Discover iTunes running on a Window Server

Govindarajan · ‎07-14-2020

SCENARIO:

Cloud Dimensions needs to identify iTunes applications running on Windows systems. In order to create a list of approved/unauthorized applications, it is necessary to be able to classify applications successfully during the discovery process.

REQUIREMENT:

As the Cloud Dimensions Discovery administrator, you are tasked with classifying iTunes and successfully discovering the application running on your Windows MID server.

Verify iTunes is running on your MID Server by launching iTunes64Setup.exe under C:\TrainingResources

Create a Process Classification for iTunes (itunes)
Run Discovery against your MID server and verify iTunes was classified successfully.

i need solution for this stimulator task.

thanks

Steele Smith · ‎07-15-2020

Okay, I just restarted the simulator so I could try instead of from memory. I was able to complete both section 6 and section 10. I'll post my screenshots of what I did.

Essentially completing step 10 definitely will do this. Note: I did restart the mid server as a just in case. Can't say if it would be required but since I did it, I'd recommend it.

First I setup the Process Classification, (you can't add the Pattern to the HorizonalDiscoveryProbe yet, but remember you need to go back to add it in.

Then create a pattern called 'iTunes'

Standard pattern, I just made sure the OS was Windows and the entry points were entered as listed. Make sure Enforce Process Classification is checked.

Going into the Identification section I did the following. To keep it easy I didn't do anything fancy and just opted for simple set parameters after the initial WMI query.

Here's what I did within each of the other steps.

Hit Save and Publish

I went back to the process Classifier and added the iTunes pattern to the horizontal pattern.

Then I jumped to MidServers and synched the pattern. Once that finished (less than a second) I just preemptively restarted the MidServer.

Then I went to Discovery Schedules and ran a quick discovery agains my mid server.

If everything was correct, you should see it running the pattern for iTunes.

I checked the Application table searching for iTunes to make sure it was created, then I opened the computer system record and checked that the app was related to the server.

I validated Step 10, then jumped back to Step 6 and validate it.

Hope this helps to get Step 6 validated.

View solution in original post

Luxo Nadappan · ‎07-21-2020

hi Govindarajan,

i tried creating the same steps..But pattern is not even executing..

Done all the all the steps,like adding patters to process classifiers, synch with mid server..But no luck? Any idea whats the issue ?

Thanks

Luxo

Faiz5 · ‎09-22-2020

Hi Luxo,

In the process classification record, update the condition to Parameters contains "itunes". Hope that helps.

Regards,

Faiz Shaikh

Ghazal · ‎10-19-2020

Hi Luxo, I have the same problem, did your pattern execute finally?

Sona9 · ‎05-03-2021

Where is this identification section that you performed the query above

Yuri Yoshinami1 · ‎06-28-2021

Hello, Steele

I couldn't find the "$software.tmp", which you have mentioned on the step5: "Set Name".

I could only find the "$software_install".

Is there anything I should configure so that I can see the "$software.tmp"?

Thank you in advance.

Yuri