#K1000 SMART LABEL WIZARD HOW TO#
#K1000 SMART LABEL WIZARD UPDATE#
#K1000 SMART LABEL WIZARD SOFTWARE#

That's why, for example, I commented out 'Converter' because there were lots of legit files with the word converter in them. Most of my signatures will catch the words between the parens if they show up ANYWHERE in that field. You can change little things here and there. If your enterprise uses VNC or something similar, you can easily track users down and clean up the infection. You can design the report with the wizard so that it shows machines by IP and even username logged in, so you can see exactly who and where the infections are.

#K1000 SMART LABEL WIZARD SOFTWARE#

The intention here is to use the Reporting features to generate a report that shows machines with Threat 5 software (see link below for example report). If you want the label to stick all the time, you can just comment out or remove the last line. So any time I see the Malware label in my list, I know there's new malware I need to categorize. Essentially what this does is creates a nice little label that only shows up in my list if NEW malware comes onto my network, and anything I've already identified and flagged Threat 5 is ignored. This script catches approximately 270 different software names and publishers, with about 10 exludes built in to avoid common false-positives I ran across, and a switch to only put softwares in the Malware label if they aren't rated with Threat 5. I chose to keep it functional for monospaced editors because I do all my editing in Notepad++. Since KACE editor is not monospaced font the layout gets a little funky. Changelogs, while bloating the line count, are useful for troubleshooting if something goes wrong. Remember when creating scripts you should comment everything so that new people coming in can make sense of what you've written. Everything is commented to hell and back, so it largely explains itself. This pastes right into the smart label script - you can use the wizard to create one and paste this in there. The query catches all malware names that I could find based on Vendor and Display fields.

#K1000 SMART LABEL WIZARD HOW TO#

I also think it's a good example of how to produce a well-documented script that is easily understood by newcomers. I wanted to share this massive smart-label script I created. Since I was assigned that little malware-cleanup job, I've hand-filtered through over 16,750 software signatures gathered from over 9000 workstations in our enterprise. I knew I could do a more efficient job by using KACE inventory tracking and reports. I was provided with this nice little print out of IP addresses and was told to track them down manually and fix the problem. So a few months ago I was tasked with tracking down some Conduit malware infections in my enterprise setting.

#K1000 SMART LABEL WIZARD UPDATE#

(AUTHOR'S NOTE: Check out my other two queries for VPNs/Proxies and P2P/Torrent Clients over here! Also, you might want to follow this post, as I'll update the query as I change it and find more signatures to track!)

K1000 smart label wizard