Local Information Gathering

The Local Information Gathering RPT step collects information about hosts that have an agent deployed on them. This macro uses the deployed agent to interact with the compromised host and gather information such as precise OS information, agent privileges, users and installed applications.

To run the Local Information Gathering step, follow this procedure:

  1. Make sure that the Network RPT is active.
  2. Click on Local Information Gathering to open up the Local Information Gathering Wizard and press Next to start.

    The Agent Selection screen displays.

    Agent selection Dialog Box

    By default, information will be gathered on all connected agents. To select one or more specific agents, click the Selected agents radio button and then click the ellipsis () button next to the Selected agents field. Follow the prompts to select your desired agents.

    Press Next to continue.

  3. Select the module categories that you want to run against the previously-selected agent(s). Then press Finish.

The module will run and information will be displayed on the Module Output and Module Log panels of the Console.