How to List Programs Across All Windows Devices
Using Kolide, you can easily view and query Windows Programs across your fleet.
Introduction
The primary means of software installation on Windows are bundles called Programs. Programs may include software installed by the operating system, by the end-user via download, or by the end-user via the Microsoft Store.
This inventory catalogs all programs found on a device which register themselves with the Windows Add/Remove Programs Wizard. This list is limited by the method which a software installs itself and as a result may not contain all installed programs.
To see a similar list on your device, you can follow the steps below:
- On your windows device type the following:
Windows-Key + Rto open the Run prompt - In the Run dialog, copy/paste the following and hit Enter:
appwiz.cpl - Review the list displayed in the Add/Remove Programs wizard.
Kolide additionally enriches the data returned by osquery, by also retrieving available icon data for installed programs.
What Windows Program Data Can Kolide Collect?
Kolide's endpoint agent bundles in osquery to efficiently collect Windows Programs from Windows devices in your fleet. Once collected, Kolide will parse, clean up, and centrally store this data in Inventory for your team to view, query, or export via API.
Kolide meticulously documents every piece of data returned so you can understand the results.
Windows Programs Schema
| Column | Type | Description | |
|---|---|---|---|
| id | Primary Key |
Unique identifier for the object |
|
| device_id | Foreign Key |
Device associated with the entry |
|
| device_name | Text |
Display name of the device associated with the entry |
|
| identifying_number | Text |
Product identification such as a serial number on software, or a die number on a hardware chip |
|
| install_location | Text |
The installation location directory of the product |
|
| install_source | Text |
The installation source of the product |
|
| installed_at | Timestamp |
Date that this product was installed on the system |
|
| language | Text |
The language of the product |
|
| name | Text |
Commonly used product name |
|
| publisher | Text |
Name of the product supplier |
|
| uninstall_string | Text |
Path and filename of the uninstaller |
|
| version | Text |
The text representation of the version |
|
| version_major | Bigint |
|
|
| version_minor | Bigint |
|
|
| version_patch | Bigint |
|
|
| version_subpatch | Bigint |
|
|
| version_pre | Text |
|
|
| version_build | Text |
|
|
| collected_at | Timestamp |
Time the row of data was first collected in the database |
|
| updated_at | Timestamp |
Time the row of data was last changed in the database |
|
Why Should I Collect Windows Programs?
Program installations are cataloged and tracked to facilitate a number of potential purposes, for example:
- Ensuring required software (VPN, Antivirus, Password Manager) is installed
- Discovering potential malicious software
- Tracking the install count of various licensed software (eg. Adobe Creative Suite, Microsoft Office)
End-User Privacy Consideration
Kolide practices Honest Security. We believe that data should be collected from end-user devices transparently and with privacy in mind.
An employer with access to your app installations can determine the following:
- What applications you have installed on your device (and the path of their installation)
When you use Kolide to list Windows Program data from end-user devices, Kolide gives the people using those devices insight into exactly what data is collected, the privacy implications, and who on the IT team can see the data. This all happens in our end-user privacy center which can be accessed directly by employees.
