Video Screencast Help

Engine and definition versions

Created: 29 Aug 2007 • Updated: 22 May 2010 | 2 comments
Is there a tool that can only give me the current (at Symantec) scan engine and definition file versions?
 
as an auditor we rely a lot on this information when we review the status of antivirus protection at our companies.  I usually spend a lot of time trying to get this info but  I end up nowhere.
 
I'm jthinking of a "fetcher" that reads the info from a db or somewhere else.  I'm thinking also, just ftp'ng and browsing through the directories and writing down the file names... maybe it's wishfull thinking
 
I have not browsed too hard, the internet yet.
 
thanks a lot
00fortune
IT Auditor
 

Comments 2 CommentsJump to latest comment

BS's picture

Do you want to get out scan engine and definition file versions from SSIM DB, collected by collectors for AV software?

antilles's picture

With SSIM and its event collectors you will get access to many information gathered by these collectors, including AV client versions and virus definitions. SSIM also provides set of predefined queries based on these collected events such as AV client versions, client versions summary, virus definitions by parent server or server group and so on.