Defacto
From Forensics Wiki
Defacto is a software inventorization tool developed by National Hi-Tech Crime Unit [1] (Russia).
Overview
Defacto builds a list of installed software programs by searching for specific files and scanning Windows Registry.
Defacto reports following information about installed software programs:
- Author (vendor);
- Product name;
- License type (freeware, shareware, etc);
- Price;
- Additional information (install date, install path, version/build, serial number, product key, etc);
- Registered owner.
Illegal Software
Defacto maintains a database of blacklisted serial numbers. It can also detect cracked software.

