# Administración y aseguramiento de la información:
- Identificación del software instalado mediante comandos y herramientas gráficas.

# Software
https://www.jesusninoc.com/07/05/5-gestion-del-software-en-powershell/

# SQL WMI
```PowerShell
Get-WmiObject -query "select name from win32_product"
```

# Comandos vistos para analizar memoria

|Command|
|---|
|numastat
|ipcs
|lstopo
|numactl
|vmstat
|slabtop
|free
|/proc/meminfo

# proc/stat
http://www.linuxhowtos.org/System/procstat.htm

|Info|Description
|---|---
|user|normal processes executing in user mode
|nice|niced processes executing in user mode
|system|processes executing in kernel mode
|idle|twiddling thumbs
|iowait|waiting for I/O to complete
|irq|servicing interrupts
|softirq|servicing softirqs

# INSTALAR OSQUERY
* https://osquery.readthedocs.io/en/stable/installation/install-windows/#running-osquery
* https://osquery.io/schema/

## EJEMPLOS
### Información del kernel
```osquery
.\osqueryi.exe "SELECT * FROM kernel_info;"
```
### Información sobre procesos
```osquery
.\osqueryi.exe "SELECT * FROM processes;"
```
