Home
  •  

Folder Discovery

Windows.Monitoring.FileSystem.Folder.Discovery (Discovery)

Folder Discovery.
Enables the discovery of folder classes.
Discovery disabled by default.
Note: You can only discover folders that are Shared and that they are discovered has File Shares.
The Discovery Process will discover all folders and subfolders within this folder.
This rule uses a custom script to discover the Folders and subfolder in a File Share.

Knowledge Base article:

Summary

This Discovery Rule discovers all Folder and Subfolders in a File Share in a Windows Computer that is running any version of a Microsoft Windows Client operating system.

Configuration

Requires that the File Share Discovery to be enabled.

Additional

The Discovery process will only work for a Discovered File Share.

Discovery Rule is disabled by default

Element properties:

TargetWindows.Monitoring.FileSystem.FileShare
EnabledFalse
Frequency7200
RemotableFalse

Object Discovery Details:

Discovered Classes and their attribuets:

Member Modules:

ID Module Type TypeId RunAs 
DS DataSource Windows.Monitoring.FileSystem.FolderDiscovery.DataSource Default

Source Code:

<Discovery ID="Windows.Monitoring.FileSystem.Folder.Discovery" Enabled="false" Target="Windows.Monitoring.FileSystem.FileShare" ConfirmDelivery="true" Remotable="true" Priority="Normal">

  <Category>Discovery</Category>

  <DiscoveryTypes>

    <DiscoveryClass TypeID="Windows.Monitoring.FileSystem.Folder">

      <Property TypeID="Windows.Monitoring.FileSystem.Folder" PropertyID="Name"/>

      <Property TypeID="Windows.Monitoring.FileSystem.Folder" PropertyID="Path"/>

      <Property TypeID="Windows.Monitoring.FileSystem.Folder" PropertyID="Drive"/>

      <Property TypeID="Windows.Monitoring.FileSystem.Folder" PropertyID="Size"/>

      <Property TypeID="Windows.Monitoring.FileSystem.Folder" PropertyID="DateCreated"/>

      <Property TypeID="Windows.Monitoring.FileSystem.Folder" PropertyID="DateModified"/>

      <Property TypeID="Windows.Monitoring.FileSystem.Folder" PropertyID="DateAccessed"/>

      <Property TypeID="System!System.Entity" PropertyID="DisplayName"/>

    </DiscoveryClass>

  </DiscoveryTypes>

  <DataSource ID="DS" TypeID="Windows.Monitoring.FileSystem.FolderDiscovery.DataSource">

    <IntervalSeconds>7200</IntervalSeconds>

    <TimeoutSeconds>300</TimeoutSeconds>

    <TargetComputer>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</TargetComputer>

    <TargetComputerID>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</TargetComputerID>

    <FolderPath>"$Target/Property[Type="Windows.Monitoring.FileSystem.FileShare"]/Path$"</FolderPath>

  </DataSource>

</Discovery>