KAA Report Spec V.01.2 2009.12.29 Example: 20091223:232053-.-kci302128-.-kpt004-.-kic01/01-.-abcdefg-.-kic01/02-.-12345-.--.- 0.)GENERAL Mark a.)Seperate Mark -.- b.)Ending Mark -.--.- c.)Addition Mark +++ b.)Reduction Mark --- 1.)Header a.)Date/TimeMark YYYYMMDD:HHMMSS b.)Customer ID kctXXXXXX c.)PC ID kptXXX d.)Report Item ID kicXX/XX 2.)Item Detail kic01.)Star Up Hardware Spec kic01/01.)CPU Name kic01/02.)CPU ID kic01/03.)CPU Core kit01/04.)RAM Size (in KB) kic02.)Network Spec kic02/01.)Physical Address kic02/02.)IP Address kic02/03.)DHCP Enable(True = Auto/False = Menaul) kic02/04.)DHCP Server kic02/05.)LAN Card Spec kic03.)New Install/Remove SoftwareName Notification kic03/01.)Installed/Removed SoftwareNames by Seperate Mark (StartUp Report All) (Addition Mark Means Install/ Reduction Mark Means Removed)SoftwareName Example: kic03/01-.-+++Adobe Air1---Adobe Air2-.- kic04.)Execute/Stop SoftwareName Notification kic04/01.)Execute/Stop SoftwareNames by Seperate Mark (StartUp Report All) (Addition Mark Means Execute/ Reduction Mark Means Stop)SoftwareName Example: kic04/01-.-+++QQ,exe Air1---calc-.- kic05.)New PlugIn/Remove Extension USB Storage kic05/01.)PlugIn/Remove Extension USB Storages Device Drive Character by Seperate Mark (StartUp Report All) (Addition Mark Means Plug In/ Reduction Mark Means Remove)Device Drive Character If USB Device Drive then Mark (U) Example: kic05/01-.-+++E(U)---F(U)-.- kic06.)New PlugIn/Remove USB Device kic06/01.)PlugIn/Remove Extension USB Storages Device Names and Manufactor by Seperate Mark (StartUp Report All) (Addition Mark Means Plug In/ Reduction Mark Means Remove)Device name (Manufactor) Example: kic06/01-.-+++USB Audio(Creative)---USB Mouse(Micro softe)-.- kic07.)Check COPY/DELETE Filename onto Extension Storage kic07/01.)FileName by IE English Vision 6.0 (Addition Mark Means Copy/ Reduction Mark Means Delete)Full FileName Example: kic07/01-.-+++E:\ABC\123\XXX.DAT---F:\qqq\zzzz\999\YYY.exe-.- kic08.)Upload File by Broser/InstantMessanger kic08/01.)FileName by IE English Vision 6.0 kic08/02.)FileName by Yahoo English Vision 9.0 kic09.)Play Audio/Video File by Application kic09/01.)FileName with Flash 10d STU=Start Up Report STS=Short Time Scanning LTS=Long Time Scanning (STU) 1.)開機時回報單機硬體內容(CPU/RAM/HDD) (2.)定時回報目前單機使用網路相關設定(IP/MAC/DNS/Gateway) 3.)回報單機安裝新軟體 4.)回報單機執行指定軟體 5.)回報單機新增外接媒體(USB Drive/HDD/CD-ROM) 6.)回報單機新增外接Camera 7.)回報單機複製/貼上外接媒體檔案(檔名/大小/時間) 8.)回報單機使用網頁上傳檔案(檔名/大小/時間) 9.)回報單機使用網頁播放多媒體(URL/檔名/時間) KAA=Komodo Alarm Agent 1.)開機時回報單機硬體內容(CPU/RAM/HDD/CD-ROM) 2.)定時回報目前單機使用網路相關設定(IP/MAC/DNS/Gateway) 3.)回報單機安裝新軟體 4.)回報單機執行指定軟體 5.)回報單機新增外接媒體(USB Drive/HDD/CD-ROM) 6.)回報單機新增外接Camera 7.)回報單機複製/貼上外接媒體檔案(檔名/大小/時間) 8.)回報單機使用網頁上傳檔案(檔名/大小/時間) 9.)回報單機使用網頁播放多媒體(URL/檔名/時間) %KAA10 併入 KAA08 10.)回報單機使用指定通訊軟體傳送檔案(檔名/大小/時間) REF-LINK http://msdn.microsoft.com/en-us/library/aa394353(VS.85).aspx