5-E.ME - Get System Info

Get System Information

If you ever need to get a quick snapshot of what a computer does or is doing. I have put together several commands that build out a report that you can keep for your recoreds. You might want to run this script before you decom a server. Or maybe you beleive the system is compromised and need to capture its running state. Obviously this script wont show you everything but it gives you a good base.

CODE:

@echo off 
del /q "%userprofile%\desktop\%computername%-temp.txt" 
del /q "%userprofile%\desktop\%computername%-info.txt" 
cls 
echo Running  
echo %date% - %time% >>%userprofile%\desktop\%computername%-Info.txt 
echo Ran by %username% >>%userprofile%\desktop\%computername%-Info.txt 
cls 
echo User  
echo: >>"%userprofile%\desktop\%computername%-Info.txt" 
echo ---User Info----------------- >>%userprofile%\desktop\%computername%-Info.txt  
net user >>%userprofile%\desktop\%computername%-Info.txt  
cls 
echo Local Group  
net localgroup administrators >>%userprofile%\desktop\%computername%-Info.txt  
cls 
echo IP  
echo: >>"%userprofile%\desktop\%computername%-Info.txt" 
echo ---System Info--------------- >>%userprofile%\desktop\%computername%-Info.txt  
ipconfig /all >>%userprofile%\desktop\%computername%-Info.txt 
cls 
echo System Info  
systeminfo >>%userprofile%\desktop\%computername%-Info.txt 
cls 
echo Set   
set >>%userprofile%\desktop\%computername%-Info.txt 
echo: >>"%userprofile%\desktop\%computername%-Info.txt" 
cls 
echo Net Share   
echo ---List Shares--------------- >>%userprofile%\desktop\%computername%-Info.txt  
net share >>%userprofile%\desktop\%computername%-Info.txt 
echo: >>"%userprofile%\desktop\%computername%-Info.txt" 
echo ---NetStat------------------- >>%userprofile%\desktop\%computername%-Info.txt  
cls 
echo Netstat  
netstat -ano >>%userprofile%\desktop\%computername%-Info.txt 
echo: >>"%userprofile%\desktop\%computername%-Info.txt" 
echo ---TaskList------------------ >>%userprofile%\desktop\%computername%-Info.txt  
tasklist /v >>%userprofile%\desktop\%computername%-Info.txt 
echo: >>"%userprofile%\desktop\%computername%-Info.txt" 
cls 
echo Running Services 
echo ---Running Services---------- >>%userprofile%\desktop\%computername%-Info.txt  
net start >>%userprofile%\desktop\%computername%-Info.txt 
cls 
echo Program Files  
echo: >>"%userprofile%\desktop\%computername%-Info.txt" 
echo ---ProgramFiles (x64) >>%userprofile%\desktop\%computername%-Info.txt  
dir /b /ad "%programfiles%" >>%userprofile%\desktop\%computername%-Info.txt  
echo: >>"%userprofile%\desktop\%computername%-Info.txt" 
echo ---ProgramFiles (x86) >>%userprofile%\desktop\%computername%-Info.txt  
dir /b /ad "%programfiles(x86)%" >>%userprofile%\desktop\%computername%-Info.txt  
reg export HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall %userprofile%\desktop\%computername%-temp.txt 
cls 
echo Installed Programs  
echo: >>"%userprofile%\desktop\%computername%-Info.txt" 
echo ---Installed Programs (simple view)---- >>%userprofile%\desktop\%computername%-Info.txt  
SETLOCAL EnableDelayedExpansion 
for /F "tokens=*" %%a in ('type "%userprofile%\desktop\%computername%-temp.txt"') do ( 
echo %%a | find "[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\" >>"%userprofile%\desktop\%computername%-Info.txt" 
echo %%a | find "DisplayName" >>"%userprofile%\desktop\%computername%-Info.txt" 
) 
cls 
echo Installed Programs  
echo: >>"%userprofile%\desktop\%computername%-Info.txt" 
echo ---Installed Programs (extended view)----- >>%userprofile%\desktop\%computername%-Info.txt  
type "%userprofile%\desktop\%computername%-temp.txt" >>"%userprofile%\desktop\%computername%-Info.txt" 
del /q "%userprofile%\desktop\%computername%-temp.txt" 
start notepad.exe /a "%userprofile%\desktop\%computername%-Info.txt" 
exit

Use at your own risk

Download: Get System Info.zip

Tag(s): Batch Local PC Security

Could you spare a few coins?
Dogecoin - D838u1m9YRdzVVu8CZ1JsR78WHgQmUZSr8
Bitcoin - 13iKLoPXcWEYcGtqCi4UcjGQEs7r6M6LFc
Thank you