Azure Analytics software audit - list of registry entries checked

Duckfield, Sam D 0 Reputation points
2023-02-10T11:49:26.8+00:00

A quick background summary to put this query into context.

Our cyber insurance requires that there is no (manufacturer/supplier/third party) unsupported software on any of our 1000+ servers. I have run an Azure Analytics query to search for 3 applications that I know have been removed over the last few months, and have subsequently run a PowerShell script to remove any related orphaned debris from the registries of the affected servers. So in theory, there should be no trace of these packages on the servers.

Running the original Analytics query, about 2 dozen servers are still reporting the presence of at least one of these packages, despite scoping the report to the last 3 days - I ensured that the last traces were removed a week ago, so the scoping should exclude anything detected earlier. I can't find any trace of these packages on the servers apart from in some user centric registry entries. These locations are not common across the servers so a scriptable solution is going to be awkward.

The registry keys checked/deleted are:

  • "HKLM:\SOFTWARE\Classes\Applications<app name>"
  • "HKLM:\SOFTWARE\Classes\Installer\Features<app unique ID>"
  • "HKLM:\SOFTWARE\Classes\Installer\Products<app unique ID>"
  • "HKCR:\Installer\Products<app unique ID>"
  • "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall{<app unique ID>}"
  • "HKLM:\SOFTWARE\Wow6432Node<app name>"
  • "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall{<app unique ID>}"
  • "HKLM:\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall<app name>"
  • ... and then the appropriate reg values under...
  • "HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders".

Is there a list of registry locations available that details the locations checked by Azure Analytics when generating application 'presence' data? I suspect I'm missing a key location that Azure analytics is checking.

Thanks for any help you can offer.

Azure Analysis Services
Azure Analysis Services
An Azure service that provides an enterprise-grade analytics engine.
437 questions
{count} votes