Check what data has been downloaded on Windows 10/11 machine

Question

Check what data has been downloaded on Windows 10/11 machine

~OSD~ 2,206

Hi,

Is it possible to monitor what data has been downloaded on the machine? For example, I have Lenovo devices and when I run the automatic check, the Lenovo system update downloads and installs the drivers, etc.

I want to check this in detail to know what packages were downloaded, where it was stored and extracted etc

Similarly for the Dell machines.

Reza-Ameri 45,816 Reputation points Volunteer Moderator

2024-03-23T10:42:58.38+00:00

Do you want to monitor all downloads in your entire networks or in each devices?
Do you want to check download only for Lenovo or Dell downloads or for all other downloads like download files from internet and so on?
~OSD~ 2,206 Reputation points

2024-03-23T16:24:07.32+00:00

Only for a particular device at the time being.

Lenovo and Dell driver update tools are downloading, extracting and installing the driver packages. I need to get hold on what /where drivers has been downloaded and extracted temporarily

2 answers

Your answer

Reza-Ameri 45,816 Reputation points Volunteer Moderator

2024-03-23T10:42:58.38+00:00

Do you want to monitor all downloads in your entire networks or in each devices?
Do you want to check download only for Lenovo or Dell downloads or for all other downloads like download files from internet and so on?
~OSD~ 2,206 Reputation points

2024-03-23T16:24:07.32+00:00

Only for a particular device at the time being.

Lenovo and Dell driver update tools are downloading, extracting and installing the driver packages. I need to get hold on what /where drivers has been downloaded and extracted temporarily

Answer 1

Hi OSD,

Thanks for your post.

For update history, you can Select Start > Settings > Update & Security > Windows Update > View update history.

For update drivers, follow the steps to check the version:

Type and search [Apps & features] in the Windows search bar, then click [Open].
In Apps & features, click [Sort by] and select [Install date].
Click [Filter by] and select [All drives]. If you would like to search in a specific drive, appoint it to the drive.
Applications will be sorted by the latest installation date, and the list will show the application version information as well. You can click the More options icon at the bottom of application if you want to uninstall it.
If you would like to search for any application, please click [Search apps] and type the name (or keyword), then you will see the result.

For any installing event, you can go to Run eventvwr.msc → Windows Logs → Right-click "Application" log.

Answer 2

Reza-Ameri 45,816 Volunteer Moderator

You may use tools which show you what programs doing when you install. One of the tool is Process Monitor and you may download it from:
https://learn.microsoft.com/en-us/sysinternals/downloads/procmon
Make sure close other programs and only run the installation and then add filter to only show result of the installation.

~OSD~ 2,206 Reputation points

2024-03-24T14:04:58.5233333+00:00

ProcMon, I know about this already. Also, check with Fiddler as well. But didn't get the desired results.
MotoX80 37,686 Reputation points

2024-03-24T23:24:54.4+00:00
Your best bet is to figure out where those update tools store their log files and then monitor the content of those files.

Trace an update event with Procmon and look for log files.

Or use Powershell and look for log files.

Get-ChildItem -Path c:\ -Filter *.log -recurse -ErrorAction SilentlyContinue | Where-Object -Property fullname -Match "Dell"

On my Dell laptop I found this folder. C:\Program Files (x86)\Dell\UpdateService\Log

Or contact those vendors support teams and ask them how you can query their tools to show what updates were installed and when.
~OSD~ 2,206 Reputation points

2024-03-25T09:30:32.05+00:00

Thank you, have contacted Lenovo already but they were not able to answer. They referred to SCCM package which contains all the driver packages.

But I will give it a try with logs with PS as you mentioned.

Share via

Check what data has been downloaded on Windows 10/11 machine

2 answers

Your answer