Change Management Profiles

Creating Change Management Profiles

In order to create a new change management profile, visit the Admin tab --> Change Management link. From here, you can click on the 'New Profile' button, and specify the following information :

• specify the name of the profile
• specify the description of the profile
• configure the e-mail ID to which a notification mail has to be sent if there are any changes detected during a scan
• specify option to generate a trouble-ticket if changes are detected (applicable only if Trouble ticket e-mail ID is configured from Admin tab)

Associating Entities to a Profile

Once a profile is created, you can associate files, folders and/or registry entries to this profile. These can be associated by visiting the Profile configuration screen and adding the entries by clicking on the respective 'Add' button. Each entity can be added to the profile either by typing the file/folder/registry path manually and or by importing paths from a text file.

Every entry can be clicked upon to check for which all assets/hosts that particular entry is being tracked for. You can also delete a particular entry from here if it is not needed anymore in the profile.

Actions on Change Management Profiles

Once a profile is created, it gets listed in the Change Management Profiles screen. From here you can perform the following tasks:

1. Create a new change management profile.
2. Add File, Folder and Registry entries to the Profile.
3. Associate the profile with Assets or Asset groups
4. Scan the Assets or Asset groups periodically to detect changes
5. Enable or Disable the created profiles. Files, Folders and Registry entries in "Disabled" profiles will not be scanned for changes

Associating a Profile to an Asset or Asset Group

This can be done in two ways:

• from the Change Management Profiles screen (Admin tab --> Change Management link) - clicking on the appropriate Action icon and selecting the assets/groups
• from the Asset Details or Asset Groups view --> Actions button --> Change Management link

During an asset scan or asset group scan, the change detection mechanism will be applied and all the parameters will be compared against the baseline and status will be reported.

Parameters tracked when detecting changes

Here are the parameters that are applied for change detection on these entities. These changes can be viewed from the Asset Details view --> Changes tab, by clicking on the entry path being tracked in the associated profile. All values are compared against a baseline and the change is reported.

The Inventory dashboard also displays a high-level view of the assets & entities which have undergone frequent changes.

File changes

• File size
• MD5 Checksum (change in content)
• Modified time
• Created time
• Last accessed time
• Vendor
• Encryption status
• Hidden status
• Compression status
• System status

Folder changes

• Folder size
• No. of files
• No. of folders
• Modified time
• Created time
• Last accessed time
• Encryption status
• Hidden status
• Compression status
• System status

Registry Changes

• Current value of registry entry
• Baseline value of registry entry

Setting Baseline

By default, the details obtained from a File or a Folder or the values for a Registry key after the first scan on an asset, will be treated as the Baseline value for various parameters being tracked. However, this can be altered at any time and a baseline can be set to be a changed value. In order to alter the baseline, you can click on the Baseline icon in the "Set as Baseline" column for the entry which has a changed status (red icon) if you think the change is appropriate. From the subsequent scans, this will be treated as the Baseline and compared against.

Setting baselines is applicable for every entry under each category (files, folders or registry).

Copyright © 2007, AdventNet Inc. All Rights Reserved.