Skip to content

Commit 0214a23

Browse files
committed
after deleting outside files
1 parent c3917a2 commit 0214a23

File tree

1 file changed

+10
-10
lines changed

1 file changed

+10
-10
lines changed

articles/defender-for-iot/organizations/detect-windows-endpoints-script.md

Lines changed: 10 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -55,26 +55,26 @@ The script detects enriched Windows data, and is run as a utility and not an ins
5555

5656
1. Sign into your OT sensor console, and select **System Settings** > **Import Settings** > **Windows Information**.
5757

58-
1. Select **Download script**. For example:
58+
1. Select **Download script**. Your browser might ask you if you want to keep the file, select **Keep** or any similar options.
5959

6060
:::image type="content" source="media/detect-windows-endpoints-script/download-wmi-script.png" alt-text="Screenshot of where to download WMI script." lightbox="media/detect-windows-endpoints-script/download-wmi-script.png":::
6161

62-
1. Copy the script to a local drive and unzip it. The following files appear:
62+
1. Copy the file to a local drive and unzip it. The following file appears:
6363

64-
- `start.bat`
65-
- `settings.json`
66-
- `data.bin`
67-
- `run.bat`
64+
- `Extract_system_info.bat`
6865

69-
1. Run the `run.bat` file.
66+
1. Run the `Extract_system_info.bat` file.
7067

71-
After the script runs to probe the registry, a CX-snapshot file appears with the registry information. The filename indicates the machine name and the current date and time of the snapshot with the following syntax: `cx_snapshot_[machinename]_[current date time]`.
68+
1. You'll be asked whether you want to display errors on screen or not. Make you own selection.
69+
70+
After the script runs to probe the registry, an output file appears with the registry information. The filename indicates the current date and time of the snapshot with the following syntax: `[current date time]_system_info_extractor`.
7271

7372
Files generated by the script include:
7473

7574
- Remain on the local drive until you delete them.
76-
- Must remain in the same location. Don't separate the generated files.
77-
- Are overwritten if you run the script again.
75+
- Are overwritten if you run the script again on the same day.
76+
- The script also logs an errorOutput that will be empty if no errors occurred during the running of the script.
77+
- The script may create a few tmp.txt files during it’s run. The script takes care of cleaning <!-- deleting-->them at the end of it’s run.
7878

7979
## Import device details
8080

0 commit comments

Comments
 (0)