mrevankar at tenablesecurity
Feb 6, 2009, 5:54 AM
Post #2 of 2
RE: Windows File Contents Check Question.
[In reply to]
The file content NASL should be able to scan files that are locally attached
to the system.
Couple of questions :
- Are there are files on P$ that contain sensitive content?
- Could you add verbose tag within the check and see what files are
for e.g. you could do :
description: "The file contains an Arizona Drivers license number"
file_extension: "txt" |"doc" |"xls" |"pdf"
expect: "License" | "Driver" | "ID" | "Arizona" | "AZ"
max_size : "50K"
Also, if you are professional feed customer, I had recommend opening a
ticket with Tenable support regarding this issue.
From: nessus-bounces [at] list [mailto:nessus-bounces [at] list]
On Behalf Of Zate Berg
Sent: Thursday, February 05, 2009 3:06 PM
Subject: Windows File Contents Check Question.
Does this only check C$?
I have a box with a P$ and windows filecheck on this completes almost
immediately as everything [PASSED]
Credentials are fine, what else could cause the checks to complete almost
I've run using both the client and the nasl from the command line.
Anyway to get more of an idea on what it happening here ? WMI issue perhaps