Check what data has been downloaded on Windows 10/11 machine

~OSD~ 2,176

Hi,

Is it possible to monitor what data has been downloaded on the machine? For example, I have Lenovo devices and when I run the automatic check, the Lenovo system update downloads and installs the drivers, etc.

I want to check this in detail to know what packages were downloaded, where it was stored and extracted etc

Similarly for the Dell machines.

Reza-Ameri 16,971 Reputation points

2024-03-23T10:42:58.38+00:00

Do you want to monitor all downloads in your entire networks or in each devices?
Do you want to check download only for Lenovo or Dell downloads or for all other downloads like download files from internet and so on?
~OSD~ 2,176 Reputation points

2024-03-23T16:24:07.32+00:00

Only for a particular device at the time being.

Lenovo and Dell driver update tools are downloading, extracting and installing the driver packages. I need to get hold on what /where drivers has been downloaded and extracted temporarily

2 answers

Reza-Ameri 16,971 Reputation points

2024-03-24T10:57:13.35+00:00

You may use tools which show you what programs doing when you install. One of the tool is Process Monitor and you may download it from:
https://learn.microsoft.com/en-us/sysinternals/downloads/procmon
Make sure close other programs and only run the installation and then add filter to only show result of the installation.
Please sign in to rate this answer.
~OSD~ 2,176 Reputation points

2024-03-24T14:04:58.5233333+00:00

ProcMon, I know about this already. Also, check with Fiddler as well. But didn't get the desired results.

MotoX80 33,556 Reputation points

2024-03-24T23:24:54.4+00:00

Your best bet is to figure out where those update tools store their log files and then monitor the content of those files.

Trace an update event with Procmon and look for log files.

Or use Powershell and look for log files.

Get-ChildItem -Path c:\ -Filter *.log -recurse -ErrorAction SilentlyContinue | Where-Object -Property fullname -Match "Dell"

On my Dell laptop I found this folder. C:\Program Files (x86)\Dell\UpdateService\Log

Or contact those vendors support teams and ask them how you can query their tools to show what updates were installed and when.

~OSD~ 2,176 Reputation points

2024-03-25T09:30:32.05+00:00

Thank you, have contacted Lenovo already but they were not able to answer. They referred to SCCM package which contains all the driver packages.

But I will give it a try with logs with PS as you mentioned.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Ian Xue 36,751 Reputation points Microsoft Vendor

2024-03-26T08:39:40.0766667+00:00
Hi OSD,

Thanks for your post.

For update history, you can Select Start > Settings > Update & Security > Windows Update > View update history.

For update drivers, follow the steps to check the version:

Type and search [Apps & features] in the Windows search bar, then click [Open].

In Apps & features, click [Sort by] and select [Install date].

Click [Filter by] and select [All drives]. If you would like to search in a specific drive, appoint it to the drive.

Applications will be sorted by the latest installation date, and the list will show the application version information as well. You can click the More options icon at the bottom of application if you want to uninstall it.

If you would like to search for any application, please click [Search apps] and type the name (or keyword), then you will see the result.

For any installing event, you can go to Run eventvwr.msc → Windows Logs → Right-click "Application" log.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Check what data has been downloaded on Windows 10/11 machine

2 answers

Your answer