Automatically collecting data regarding assets of a business entity
A system to automatically gather attribute data about elements such as networks, network interface cards, operating systems, device types, installed software, processes in execution, financial data, etc. in an organization or a designated subset of the organization. Fingerprint files are used, each fingerprint file corresponding to an element of a specific type and each containing a list of attributes that will be found if that element exists in the system. Each fingerprint contains or points to one or more collection instructions which control a data collector process to attempt to gather attribute data. Each fingerprint contains or points to rules that are used to analyze the attribute data gathered to calculate the probability that the element exists. The rules can be fired sequentially, in if-then-else fashion or can be incorporated in a script in loops and with mathematical manipulations, tests and branching for more sophisticated analysis. Fingerprints can be turned on and off by configuration data and can be used in a logical order to do discovery without any prior knowledge of the systems being analyzed. A refresh schedule and collection calendar control how often the fingerprints are used in some embodiments, and collected data is stored with time stamps to enable analysis of changes in the data over time.
1. A non-transitory computer-readable storage medium having stored thereon computer-readable instructions which, when executed, control a computer to perform a method for gathering attribute data about elements, the method comprising:
generating a plurality of element data structures recognizable by a computer system, the plurality of element data structures corresponding to installed software on the computer system;
generating, based on a plurality of fingerprint files, a plurality of collection instructions associated with each element data structure for retrieving attribute data for the element data structure within the computer system, wherein each collection instruction is referenced in a respective fingerprint file specific to a type associated with the element data structure, the fingerprint file indicating attributes of the element data structure;
collecting attribute data using the collection instructions generated based on the fingerprint files, wherein the collected attribute data is stored in a single common data store after post-processing to conform the collected attribute data to the element data structure;
examining the stored attribute data to determine that an element exists within the computer system, wherein the examination includes matching the stored attribute data with attribute definitions of known elements;
generating entries for each matched element, wherein each matched element comprises collected attribute data that matches with attribute definitions of known elements; and
characterizing features of the computer system based on the matched elements found on the computer system from the generated entries.
2. The computer-readable storage medium of claim 1 , wherein the collected attribute data about the elements collected using the collection instruction includes a timestamp indicating when the attribute data was collected.
3. The computer-readable storage medium of claim 1 , wherein the collecting of attribute data about elements using the collection instructions is performed according to a refresh schedule which indicates when selected ones or all of the attribute data can be collected.
4. The computer-readable storage medium of claim 1 , wherein the collecting of attribute data about elements using the collection instructions is performed according to a refresh schedule, wherein the refresh schedule includes a separate refresh schedule for each individual attribute data.
5. The computer-readable storage medium of claim 4 , wherein the refresh schedule further includes separate refresh schedules for individual classes of attribute data.
6. The computer-readable storage medium of claim 1 , wherein the collecting of attribute data about elements using the collection instructions is performed according to a collection calendar that controls a time, day and date individual items of attribute data is collected.
7. The computer-readable storage medium of claim 6 , wherein the collection calendar further controls a time, day and date individual classes of attribute data are collected.
8. The computer-readable storage medium of claim 1 , wherein the method further comprises:
storing the collected attribute data about elements in a collected data table,
selecting an attribute from the collected data table, wherein the selection is based on a correlation index that specifies what attributes are to be selected, and
storing the selected attributes in particular locations in a correlation table data structured based on the correlation index that specifies how the selected attribute will be displayed with respect to relationships between different attribute data over time.
9. The computer-readable storage medium of claim 8 , wherein the correlation index is provided by a user and is stored with the plurality of element data structures associated with the element.
10. The computer-readable storage medium of claim 1 , wherein the method further defines collection instructions as a program, script or list of instructions, wherein the collection instructions gather attribute data of a specific attribute for a specific element.
11. The computer-readable storage medium of claim 10 , wherein the collection instructions gather attribute data associated with a group of elements.
12. The computer-readable storage medium of claim 10 , wherein the collection instructions gather attribute data of a specific attribute for a specific asset.
13. The computer-readable storage medium of claim 1 , wherein the stored plurality of collection instructions in each element data structure is also directed towards retrieving a pointer to a collection instruction capable of retrieving attribute data of that type.
14. The computer-readable storage medium of claim 1 , wherein the features including one or more of operating system, CPU type, processing speed, or memory.
15. The computer-readable storage medium of claim 1 , wherein each fingerprint file is associated with an order, and wherein attribute data is collected based on the order.