Collects a list of configured and running services on host endpoints.
This audit was formerly known as the w32services audit.
Supported Platforms
Windows and macOS
Input Parameters
The following input parameters are available for this audit. Some parameters are supported only in Windows environments.
MD5
Details | Values | Description |
|---|---|---|
Platform | Windows and macOS | Windows and macOS environments |
Format | Bool | Valid values are Boolean values. |
Required? | no | This parameter is not required. |
Repeatable? | no | This parameter can be specified only once per audit request. It cannot be repeated. |
Valid Values | Use Boolean values to indicate whether an MD5 hash should be computed for each returned file. |
SHA1
Details | Values | Description |
|---|---|---|
Platform | Windows and macOS | Windows and macOS environments |
Format | Bool | Valid values are Boolean values. |
Required? | no | This parameter is not required. |
Repeatable? | no | This parameter can be specified only once per audit request. It cannot be repeated. |
Valid Values | Use Boolean values to indicate whether an SHA1 hash should be computed for each returned file. |
SHA256
Details | Values | Description |
|---|---|---|
Platform | Windows and macOS | Windows and macOS environments |
Format | Bool | Valid values are Boolean values. |
Required? | no | This parameter is not required. |
Repeatable? | no | This parameter can be specified only once per audit request. It cannot be repeated. |
Valid Values | Use Boolean values to indicate whether an SHA256 hash should be computed for each returned file. |
Verify Digital Signatures
Details | Values | Description |
|---|---|---|
Platform | Windows and macOS | Windows and macOS environments |
Format | Bool | Valid values are Boolean values. |
Required? | no | This parameter is not required. |
Repeatable? | no | This parameter can be specified only once per audit request. It cannot be repeated. |
Valid Values | Use Boolean values to indicate whether the audit should verify that the loaded drivers are digitally signed. This operation cannot be performed on a memory image. |
Preserve Times
Details | Values | Description |
|---|---|---|
Platform | Windows and macOS | Windows and macOS environments |
Format | Bool | Valid values are Boolean values. |
Required? | no | This parameter is not required. |
Repeatable? | no | This parameter can be specified only once per audit request. It cannot be repeated. |
Valid Values | Use Boolean values to indicate whether the last access times for audited files should be manually reset. |
raw mode
Details | Values | Description |
|---|---|---|
Platform | Windows | Windows environments |
Format | Bool | Valid values are Boolean values. |
Required? | no | This parameter is not required. |
Repeatable? | no | This parameter can be specified only once per audit request. It cannot be repeated. |
Valid Values | Use Boolean values to indicate whether to open files for hashing in raw mode. |
Prevent Hibernation
Details | Values | Description |
|---|---|---|
Platform | Windows | Windows environments |
Format | Bool | Valid values are Boolean values. |
Required? | no | This parameter is not required. |
Repeatable? | no | This parameter can be specified only once per audit request. It cannot be repeated. |
Valid Values | Use Boolean values to indicate whether to prevent the host endpoint from entering hibernation while this audit is executed. |