Windows 10 machines are getting classified as Window servers

Jefferson S
Kilo Explorer

Hi, I ran discovery of our work environment and the windows 10 machines (desktops/laptops) are getting classified under WIndows servers. WMI classify works and in the ECC Q I am able to see the parameters of Windows 10 machines getting discovered, but these machines are classified under Windows server class. I am on New York version and I run credential less discovery since it's for testing purpose.

13 REPLIES 13

The issue is likely that the other Windows Classifications are a little too vague. Opening one (or more) and looking over the Classification Criteria, you will likely see ways to make them a bit more defined.

Here is an example of some edits I made for Windows Server 2016:

find_real_file.png

Jefferson S
Kilo Explorer

Hello Ian,

 

I tried adding more classification rules, despite it did not work

 

find_real_file.png

Hi,

What is the order of this classifier?

Thanks,
Ashutosh

The order of the classifier is 50, probably the least value compared to other classifiers

Hi,

can you show me WMI classify probe input payload


Thanks,
Ashutosh