Defacto

From Forensics Wiki
Revision as of 16:38, 12 September 2008 by .FUF (Talk | contribs)

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)
Jump to: navigation, search

Defacto is a software inventorization tool developed by National Hi-Tech Crime Unit [1] (Russia).

Overview

Defacto builds a list of installed software programs by searching for specific files and scanning Windows Registry.

Defacto reports following information about installed software programs:

  • Author (vendor);
  • Product name;
  • License type (freeware, shareware, etc);
  • Price;
  • Additional information (install date, install path, version/build, serial number, product key, etc);
  • Registered owner.

Illegal Software

Defacto maintains a database of blacklisted serial numbers. It can also detect cracked software.

External Links