[Autogenerated] So now that we've reviewed the scenario in environment,
let's get into this module as noted previously in this module we are
going to be focusing on the gathering of information that is available
for a local and remote system for this section.
We are going to focus on the local portion of this mandate and take a
look at some of the different python modules that can be used to gather
this information from the local device.
And in our case this local device is running Microsoft
Windows 10 professional to achieve this task,
we are going to be focusing on four different common
python modules for this purpose.
This includes the platform, P Sutil, W M I and Win apps modules.
There are of course other modules that are available
including the win 32 series of modules.
But for this section we are going to be focusing on
these to install these modules.
Use the python pip utility as described in the earlier
creating a learning environment section.
The platform module is used to access a target platforms, identifying data.
This includes multiple data points including a systems architecture,
platform, platform version, Platform edition,
Python version and python implementation,
to name a few.
We will show each of these for this system that we have
built in the demonstration environment.
The PS Util module is a bit more expansive and is used to collect and monitor
information related to a system's processes and applications,
including the ability to display overall and process specific
utilization the W M I or Windows management instrumentation module is a
wrapper to Microsoft libraries that allow the management of a device
both locally and remotely and the Win.
apps module is focused on managing applications in a windows environment.
For our purposes,
we will only be using it to collect information about the
installed applications from a security standpoint.
All of this information can be used in multiple ways
depending on your specific position.
If you are the person responsible for securing the system,
the process information that is collected can be used to
determine what is currently running,
who spawned them and whether they are using resources
that they are not supposed to be using.
This will be covered in more detail in later modules.
If you are someone attempting to break into a system
and have gained this type of access,
it is possible to use this information to further your attack by
collecting specific version and patch numbers.
Python versions and process information that can be collected and further
exploited as a security engineer for Globomantics this can be used in both
ways depending on your specific task and system.
Since you are a staff engineer,
you do have the responsibility to maintain the security of
your systems But there are times when performing ___________
tests is part of that job as well.
And the information collected from these modules that will be shown in the
next demonstration section can be useful in both occurrences.
So now with this reviewed, let's move into our demonstration environment