View Other Properties

Contents

View Other Properties

How to List Programs Across All Windows Devices

Using Kolide, you can easily view and query Windows Programs across your fleet.

Introduction

The primary means of software installation on Windows are bundles called Programs. Programs may include software installed by the operating system, by the end-user via download, or by the end-user via the Microsoft Store.

This inventory catalogs all programs found on a device which register themselves with the Windows Add/Remove Programs Wizard. This list is limited by the method which a software installs itself and as a result may not contain all installed programs.

To see a similar list on your device, you can follow the steps below:

  1. On your windows device type the following: Windows-Key + R to open the Run prompt
  2. In the Run dialog, copy/paste the following and hit Enter: appwiz.cpl
  3. Review the list displayed in the Add/Remove Programs wizard.

Kolide additionally enriches the data returned by osquery, by also retrieving available icon data for installed programs.

What Windows Program Data Can Kolide Collect?

Kolide's endpoint agent bundles in osquery to efficiently collect Windows Programs from Windows devices in your fleet. Once collected, Kolide will parse, clean up, and centrally store this data in Inventory for your team to view, query, or export via API.

Kolide meticulously documents every piece of data returned so you can understand the results.

Windows Programs Schema

Column Type Description
id Primary Key

Unique identifier for the object

device_id Foreign Key

Device associated with the entry

device_name Text

Display name of the device associated with the entry

identifying_number Text

Product identification such as a serial number on software, or a die number on a hardware chip

install_location Text

The installation location directory of the product

install_source Text

The installation source of the product

installed_at Timestamp

Date that this product was installed on the system

language Text

The language of the product

name Text

Commonly used product name

publisher Text

Name of the product supplier

uninstall_string Text

Path and filename of the uninstaller

version Text

The text representation of the version

version_major Bigint

version's semver major version (ex: 4.2.1 would yield 4)

version_minor Bigint

version's semver minor version (ex: 4.2.1 would yield 2)

version_patch Bigint

version's semver patch version (ex: 4.2.1 would yield 1)

version_subpatch Bigint

version's numeric status fourth position number (ex: 4.2.1.6 would yield 6)

version_pre Text

version's semver pre-release version (ex: 1.2.3-prerelease+build would yield pre-release)

version_build Text

version's semver build version (ex: 1.2.3-prerelease+build would yield build)

collected_at Timestamp

Time the row of data was first collected in the database

updated_at Timestamp

Time the row of data was last changed in the database

Why Should I Collect Windows Programs?

Program installations are cataloged and tracked to facilitate a number of potential purposes, for example:

  • Ensuring required software (VPN, Antivirus, Password Manager) is installed
  • Discovering potential malicious software
  • Tracking the install count of various licensed software (eg. Adobe Creative Suite, Microsoft Office)

End-User Privacy Consideration

Kolide practices Honest Security. We believe that data should be collected from end-user devices transparently and with privacy in mind.

An employer with access to your app installations can determine the following:

  • What applications you have installed on your device (and the path of their installation)

When you use Kolide to list Windows Program data from end-user devices, Kolide gives the people using those devices insight into exactly what data is collected, the privacy implications, and who on the IT team can see the data. This all happens in our end-user privacy center which can be accessed directly by employees.

Share this story:

Related Device Properties:

New
Mac Apps
apps, software
New
Linux RPM Packages
centos, rpm, software, packages
New
Linux Debian Packages
debian, software, packages
View full list of Kolide's Device Properties
Book A Demo
Book A Demo