RetrieveNetstat Job
The RetrieveNetstat job reveals all open ports along with associated executables on targeted systems.
Queries for the RetrieveNetstat Job
The RetrieveNetstat job is uses the TextSearch Data Collector for the following query:
CAUTION: The query is preconfigured for this job. Never modify the query.
The query for the RetrieveNetstat job is:
- Get NETSTAT Command Output Uses the TextSearch Data Collector to read the results of the NETSTAT text file
Analysis Tasks for the RetrieveNetstat Job
Navigate to the Windows > Security Utilities > OpenPortScan > RetrieveNetstat > Configure node and select Analysis to view the analysis tasks.
CAUTION: Do not modify or deselect the selected analysis task. The analysis task is preconfigured for this job.
The default analysis tasks are:
-
- NETSTAT Result – Creates the SA_RetrieveNetstat_NETSTAT table accessible under the job’s Results node
In addition to the tables and views created by the analysis tasks, the EX_DeliveryTimes job produces the following pre-configured report.
| Report | Description | Default Tags | Report Elements |
|---|---|---|---|
| Network Ports (Open Ports Report) | This job is designed to report on all available ports on the targeted host. It will bring back the results of a Netstat -b -a. | None | This report is comprised of one element: - Table – Provides details on open ports |