"example.xml"

<< Click to Display Table of Contents >>

RayVentory Scan Engine > 12.6 u4 > User Guide > Appendix III: Default and Example Configuration Files

"example.xml"

<?xml version="1.0" encoding="utf-8"?>

<QueryFile xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance">

<Queries Mandatory="true" IsSoftware="false" WmiClass="Win32_ComputerSystem" Namespace="\root\cimv2" Name="Name">

<Fields WmiPropertyName="Manufacturer" />

<Fields WmiPropertyName="Model" />

<Fields WmiPropertyName="Domain" />

<Fields WmiPropertyName="DomainRole" />

<Fields WmiPropertyName="NumberOfProcessors" />

<Fields WmiPropertyName="NumberOfLogicalProcessors" />

<Fields WmiPropertyName="TotalPhysicalMemory" />

<Fields WmiPropertyName="Status" />

<Fields WmiPropertyName="UserName" />

</Queries>

<Queries Mandatory="false" IsSoftware="false" WmiClass="Win32_ComputerSystemProduct" Namespace="\root\cimv2" Name="Name">

<Fields WmiPropertyName="IdentifyingNumber" />

<Fields WmiPropertyName="Name" />

<Fields WmiPropertyName="UUID" />

<Fields WmiPropertyName="Vendor" />

<Fields WmiPropertyName="Version" />

</Queries>

<Queries Mandatory="false" IsSoftware="false" WmiClass="Win32_OperatingSystem" Namespace="\root\cimv2" Name="Caption">

<Fields WmiPropertyName="Name" />

<Fields WmiPropertyName="Manufacturer" />

<Fields WmiPropertyName="Version" />

<Fields WmiPropertyName="ServicePackMajorVersion" />

<Fields WmiPropertyName="ServicePackMinorVersion" />

<Fields WmiPropertyName="SerialNumber" />

<Fields WmiPropertyName="InstallDate" />

<Fields WmiPropertyName="LastBootUpTime" />

<Fields WmiPropertyName="OSLanguage" />

<Fields WmiPropertyName="FreePhysicalMemory" />

<Fields WmiPropertyName="FreeVirtualMemory" />

<Fields WmiPropertyName="CountryCode" />

<Fields WmiPropertyName="WindowsDirectory" />

<Fields WmiPropertyName="SystemDirectory" />

<Fields WmiPropertyName="Caption" />

<Fields WmiPropertyName="CSDVersion" />

<Fields WmiPropertyName="Status" />

<Fields WmiPropertyName="CSName" />

<Fields WmiPropertyName="OSType" />

<Fields WmiPropertyName="OSArchitecture" />

</Queries>

<Queries Mandatory="false" IsSoftware="false" WmiClass="Win32_Process" Namespace="\root\cimv2" Name="ProcessId">

<Fields WmiPropertyName="Name" />

<Fields WmiPropertyName="Caption" />

<Fields WmiPropertyName="ExecutablePath" />

<Fields WmiPropertyName="CommandLine" />

<Fields WmiPropertyName="User" />

<Fields WmiPropertyName="VirtualSize" />

</Queries>

<Queries Mandatory="false" IsSoftware="false" WmiClass="Win32_BIOS" Namespace="\root\cimv2" Name="Name">

<Fields WmiPropertyName="Manufacturer" />

<Fields WmiPropertyName="Version" />

<Fields WmiPropertyName="ReleaseDate" />

<Fields WmiPropertyName="SerialNumber" />

<Fields WmiPropertyName="BiosCharacteristics" />

<Fields WmiPropertyName="Status" />

</Queries>

<Queries Mandatory="false" IsSoftware="false" WmiClass="Win32_Processor" Namespace="\root\cimv2" Name="Name">

<Fields WmiPropertyName="Description" />

<Fields WmiPropertyName="Manufacturer" />

<Fields WmiPropertyName="Version" />

<Fields WmiPropertyName="ProcessorId" />

<Fields WmiPropertyName="CurrentClockSpeed" />

<Fields WmiPropertyName="CurrentVoltage" />

<Fields WmiPropertyName="L2CacheSize" />

<Fields WmiPropertyName="Status" />

<Fields WmiPropertyName="MaxClockSpeed" />

<Fields WmiPropertyName="Name" />

<Fields WmiPropertyName="ProcessorType" />

<Fields WmiPropertyName="NumberOfLogicalProcessors" />

<Fields WmiPropertyName="NumberOfCores" />

<Fields WmiPropertyName="DeviceID" />

<Fields WmiPropertyName="Architecture" />

</Queries>

<Queries Mandatory="false" IsSoftware="false" WmiClass="Win32_DiskDrive" Namespace="\root\cimv2" Name="Name">

<Fields WmiPropertyName="Description" />

<Fields WmiPropertyName="InterfaceType" />

<Fields WmiPropertyName="Manufacturer" />

<Fields WmiPropertyName="Model" />

<Fields WmiPropertyName="Partitions" />

<Fields WmiPropertyName="Size" />

<Fields WmiPropertyName="Status" />

</Queries>

<Queries Mandatory="false" IsSoftware="false" WmiClass="Win32_LogicalDisk" Namespace="\root\cimv2" Name="Name">

<Fields WmiPropertyName="Description" />

<Fields WmiPropertyName="VolumeName" />

<Fields WmiPropertyName="FileSystem" />

<Fields WmiPropertyName="FreeSpace" />

<Fields WmiPropertyName="Size" />

<Fields WmiPropertyName="VolumeSerialNumber" />

<Fields WmiPropertyName="DriveType" />

<Fields WmiPropertyName="MediaType" />

<Fields WmiPropertyName="Status" />

<Fields WmiPropertyName="ProviderName" />

</Queries>

<Queries Mandatory="false" IsSoftware="false" WmiClass="Win32_CDROMDrive" Namespace="\root\cimv2" Name="Name">

<Fields WmiPropertyName="Description" />

<Fields WmiPropertyName="Manufacturer" />

<Fields WmiPropertyName="Drive" />

<Fields WmiPropertyName="Status" />

<Fields WmiPropertyName="Capabilities" />

</Queries>

<Queries Mandatory="false" IsSoftware="false" WmiClass="Win32_NetworkAdapter" Namespace="\root\cimv2" Name="Name">

<Fields WmiPropertyName="Manufacturer" />

<Fields WmiPropertyName="MACAddress" />

<Fields WmiPropertyName="MaxSpeed" />

<Fields WmiPropertyName="Speed" />

<Fields WmiPropertyName="Status" />

</Queries>

<Queries Mandatory="false" IsSoftware="false" WmiClass="Win32_NetworkAdapterConfiguration" Namespace="\root\cimv2" Name="Caption">

<Fields WmiPropertyName="Caption" />

<Fields WmiPropertyName="Description" />

<Fields WmiPropertyName="Index" />

<Fields WmiPropertyName="MACAddress" />

<Fields WmiPropertyName="IPEnabled" />

<Fields WmiPropertyName="DHCPEnabled" />

<Fields WmiPropertyName="IPAddress" />

<Fields WmiPropertyName="DHCPServer" />

<Fields WmiPropertyName="DNSHostName" />

<Fields WmiPropertyName="DNSDomain" />

<Fields WmiPropertyName="DNSServerSearchOrder" />

<Fields WmiPropertyName="DefaultIPGateway" />

<Fields WmiPropertyName="IPSubnet" />

</Queries>

<Queries Mandatory="false" IsSoftware="false" WmiClass="Win32_PhysicalMemory" Namespace="\root\cimv2" Name="Name">

<Fields WmiPropertyName="Capacity" />

<Fields WmiPropertyName="MemoryType" />

<Fields WmiPropertyName="PositionInRow" />

<Fields WmiPropertyName="Speed" />

<Fields WmiPropertyName="Status" />

</Queries>

<Queries Mandatory="false" IsSoftware="false" WmiClass="Win32_SoundDevice" Namespace="\root\cimv2" Name="Name">

<Fields WmiPropertyName="Name" />

<Fields WmiPropertyName="Manufacturer" />

</Queries>

<Queries Mandatory="false" IsSoftware="false" WmiClass="Win32_VideoController" Namespace="\root\cimv2" Name="Name">

<Fields WmiPropertyName="Name" />

<Fields WmiPropertyName="VideoProcessor" />

<Fields WmiPropertyName="DriverVersion" />

<Fields WmiPropertyName="DriverDate" />

<Fields WmiPropertyName="InstalledDisplayDrivers" />

<Fields WmiPropertyName="AdapterRAM" />

</Queries>

<Queries Mandatory="false" IsSoftware="false" WmiClass="Win32_VideoConfiguration" Namespace="\root\cimv2" Name="Name">

<Fields WmiPropertyName="AdapterRAM" />

<Fields WmiPropertyName="AdapterType" />

<Fields WmiPropertyName="Description" />

<Fields WmiPropertyName="HorizontalResolution" />

<Fields WmiPropertyName="MonitorManufacturer" />

<Fields WmiPropertyName="MonitorType" />

<Fields WmiPropertyName="Name" />

<Fields WmiPropertyName="VerticalResolution" />

</Queries>

<Queries Mandatory="false" IsSoftware="false" WmiClass="Win32_SystemEnclosure" Namespace="\root\cimv2" Name="Name" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="SoftwareLicensingProduct" Namespace="\root\cimv2" Name="Name">

<Fields WmiPropertyName="ApplicationID" />

<Fields WmiPropertyName="Description" />

<Fields WmiPropertyName="EvaluationEndDate" />

<Fields WmiPropertyName="GracePeriodRemaining" />

<Fields WmiPropertyName="LicenseStatus" />

<Fields WmiPropertyName="MachineURL" />

<Fields WmiPropertyName="Name" />

<Fields WmiPropertyName="OfflineInstallationId" />

<Fields WmiPropertyName="PartialProductKey" />

<Fields WmiPropertyName="ProcessorURL" />

<Fields WmiPropertyName="ProductKeyID" />

<Fields WmiPropertyName="ProductKeyURL" />

<Fields WmiPropertyName="UseLicenseURL" />

</Queries>

<Queries Mandatory="false" IsSoftware="false" WmiClass="SoftwareLicensingService" Namespace="\root\cimv2" Name="KeyManagementServiceProductKeyID">

<Fields WmiPropertyName="ClientMachineID" />

<Fields WmiPropertyName="IsKeyManagementServiceMachine" />

<Fields WmiPropertyName="KeyManagementServiceCurrentCount" />

<Fields WmiPropertyName="KeyManagementServiceMachine" />

<Fields WmiPropertyName="KeyManagementServiceProductKeyID" />

<Fields WmiPropertyName="PolicyCacheRefreshRequired" />

<Fields WmiPropertyName="RequiredClientCount" />

<Fields WmiPropertyName="Version" />

<Fields WmiPropertyName="VLActivationInterval" />

<Fields WmiPropertyName="VLRenewalInterval" />

</Queries>

<Queries Mandatory="false" IsSoftware="true" WmiClass="Win32_Product" Namespace="\root\cimv2" Name="Name" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="MGS_MSSQL2000" Namespace="\root\cimv2" Name="Name" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="MGS_MSSQL20058" Namespace="\root\cimv2" Name="Name" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="MGS_MSSSRS_2017" Namespace="\root\cimv2" Name="Name" />

<!--<Queries Mandatory="false" IsSoftware="false" WmiClass="MGS_Docker_Version" Namespace="\root\cimv2" Name="Name" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="MGS_IBM_DB2" Namespace="\root\cimv2" Name="Name" /> -->

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_ComputerSystem" Namespace="\root\virtualization" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_VirtualSystemSettingData" Namespace="\root\virtualization" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_MemorySettingData" Namespace="\root\virtualization" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_ProcessorSettingData" Namespace="\root\virtualization" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_KvpExchangeComponent" Namespace="\root\virtualization" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_GuestNetworkAdapterConfiguration" Namespace="\root\virtualization" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_EmulatedEthernetPort" Namespace="\root\virtualization" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_SyntheticEthernetPortSettingData" Namespace="\root\virtualization" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_InternalEthernetPort" Namespace="\root\virtualization" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_SystemBIOS" Namespace="\root\virtualization" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_BIOSElement" Namespace="\root\virtualization" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_SummaryInformation" Namespace="\root\virtualization" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_BootSourceSettingData" Namespace="\root\virtualization" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_EthernetPortData" Namespace="\root\virtualization" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_EthernetPortInfo" Namespace="\root\virtualization" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_LANEndpoint" Namespace="\root\virtualization" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_ComputerSystem" Namespace="\root\virtualization\v1" Name="Name" Evidence="virtualization\v1" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_VirtualSystemSettingData" Namespace="\root\virtualization\v1" Name="Name" Evidence="virtualization\v1" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_MemorySettingData" Namespace="\root\virtualization\v1" Name="Name" Evidence="virtualization\v1" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_ProcessorSettingData" Namespace="\root\virtualization\v1"Name="Name" Evidence="virtualization\v1" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_KvpExchangeComponent" Namespace="\root\virtualization\v1" Name="Name" Evidence="virtualization\v1" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_GuestNetworkAdapterConfiguration" Namespace="\root\virtualization\v1" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_EmulatedEthernetPort" Namespace="\root\virtualization\v1" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_SyntheticEthernetPortSettingData" Namespace="\root\virtualization\v1" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_InternalEthernetPort" Namespace="\root\virtualization\v1" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_SystemBIOS" Namespace="\root\virtualization\v1" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_BIOSElement" Namespace="\root\virtualization\v1" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_SummaryInformation" Namespace="\root\virtualization\v1" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_BootSourceSettingData" Namespace="\root\virtualization\v1" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_EthernetPortData" Namespace="\root\virtualization\v1" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_EthernetPortInfo" Namespace="\root\virtualization\v1" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_LANEndpoint" Namespace="\root\virtualization\v1" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_ComputerSystem" Namespace="\root\virtualization\v2" Name="Name" Evidence="virtualization\v2" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_VirtualSystemSettingData" Namespace="\root\virtualization\v2" Name="Name" Evidence="virtualization\v2" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_MemorySettingData" Namespace="\root\virtualization\v2" Name="Name" Evidence="virtualization\v2" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_ProcessorSettingData" Namespace="\root\virtualization\v2" Name="Name" Evidence="virtualization\v2" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_KvpExchangeComponent" Namespace="\root\virtualization\v2" Name="Name" Evidence="virtualization\v2" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_GuestNetworkAdapterConfiguration" Namespace="\root\virtualization\v2" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_EmulatedEthernetPort" Namespace="\root\virtualization\v2" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_SyntheticEthernetPortSettingData" Namespace="\root\virtualization\v2" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_InternalEthernetPort" Namespace="\root\virtualization\v2" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_SystemBIOS" Namespace="\root\virtualization\v2" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_BIOSElement" Namespace="\root\virtualization\v2" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_SummaryInformation" Namespace="\root\virtualization\v2" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_BootSourceSettingData" Namespace="\root\virtualization\v2" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_EthernetPortData" Namespace="\root\virtualization\v2" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_EthernetPortInfo" Namespace="\root\virtualization\v2" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Msvm_LANEndpoint" Namespace="\root\virtualization\v2" Name="Name" Evidence="virtualization" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Win32_serverFeature" Namespace="\root\cimv2" Name="Name" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="MSCluster_Cluster" Namespace="\root\MSCluster" Name="Name" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="Win32_Service" Namespace="\root\cimv2" Name="Name" />

<!-- <Queries Mandatory="false" IsSoftware="true" WmiClass="Win32_InstalledStoreProgram" Namespace="\root\cimv2" Name="Name">

<Fields WmiPropertyName="ProgramId" />

<Fields WmiPropertyName="Name" />

<Fields WmiPropertyName="Vendor" />

<Fields WmiPropertyName="Version" />

<Fields WmiPropertyName="Language" />

<Fields WmiPropertyName="Architecture" />

</Queries> -->

<Queries Mandatory="false" IsSoftware="false" WmiClass="MGS_ExchangeServer" Namespace="\root\cimv2" Name="Name" />

<Queries Mandatory="false" IsSoftware="false" WmiClass="MGS_SPProduct" Namespace="\root\cimv2" Name="Name" />

<Keys Namespace="\root\cimv2" Hive="HKEY_LOCAL_MACHINE" Path="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" View="64" />

<Keys Namespace="\root\cimv2" Hive="HKEY_LOCAL_MACHINE" Path="SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall" View="32" />

<Keys Namespace="\root\cimv2" Hive="HKEY_LOCAL_MACHINE" Path="SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Uninstall" View="32" />

<Keys Namespace="\root\cimv2" Hive="HKEY_LOCAL_MACHINE"" Path="SOFTWARE\Microsoft\Virtual Machine\Guest\Parameters" View="32" />

<Keys Namespace="\root\cimv2" Hive="HKEY_LOCAL_MACHINE" Path="SOFTWARE\Microsoft\Virtual Machine\Guest\Parameters" View="64" />

<Files Enabled="false" Path="\Program_Files%" DriveLetter="c:" Extension="exe" GetContent="false" GetMD5="false" SearchSubdirs="true" ContentLimit="0" />

<Files Enabled="false" Path="%" DriveLetter="c:" Extension="swidtag" GetContent="true" GetMD5="false" SearchSubdirs="true" ContentLimit="16384" />

</QueryFile>