DART BUNDLE SUMMARY

Time:
OS:
User Name:
Bundle on client computer:
0237.zip

02/10/16 2:38:18 AM
Windows 8 : WinNT 6.2.9200
Arun Bharadwaj M
C:\Users\Arun Bharadwaj M\Desktop\DARTBundle_0210_

================================================================================
=============================================================
Cisco AnyConnect AMP Enabler Module:
Files Included in Bundle:
ID
Filename
Description
File Size
---------------------------------------------------------------------------------------------------ampe-logs
AMPEnabler.txt
AMP Enabler application logs
2.11M
---------------------------------------------------------------------------------------------------Files Omitted from Bundle:
ID
Filename
Description
Reason Omitted
-------------------------------------------------------------------------------------------------------------------------------------------amp-connector-lo N/A
AMP Connector installation logs
No file found with path matching:
gs
C:\WINDOWS\Temp\immpro_install.log
amp-profile
N/A
AmpEnabler Profile
No file found with path matching:
C:\ProgramData\Cisco\Cisco AnyConnect Secure
Mobility
Client\AMPEnabler\AMPEnabler_ServiceProfile.xml
N/A
AmpEnabler Profile
No file found with path matching:

amp-profile

C:\ProgramData\Cisco\Cisco AnyConnect Secure

Mobility Client\AMPEnabler\PersistedData.dat
ampe-install
N/A
AMP Enabler install logs
No file found with path matching:
C:\Users\ARUNBH~1\AppData\Local\Temp\anyconnect-a
mp-*.log
ampe-install
N/A
No file found with path matching:
ampe-logs

AMP Enabler install logs

C:\WINDOWS\Temp\anyconnect-amp-*.log
AMPEnabler.evtx
AMP Enabler application logs
DART cannot access temporary output at:
C:\Users\ARUNBH~1\AppData\Local\Temp\AMPEnabler.e

vtx as specified by Config

-------------------------------------------------------------------------------------------------------------------------------------------================================================================================
=============================================================
Cisco AnyConnect Secure Mobility Client:
Files Included in Bundle:
ID
Filename
Description
File Size
---------------------------------------------------------------------------------------------------ac-config
hosts
AnyConnect Configurations
824 bytes
ac-install
update.txt
AnyConnect install logs
11 bytes
ac-install
VPNManifest.dat
AnyConnect install logs
92 bytes
ac-install
AnyConnectLocalPolicy.xml
AnyConnect install logs
1.30K
ac-install
UpdateHistory_20160131_2256 AnyConnect install logs
381 bytes
50_log.txt
ac-install

update_pre3.0.txt

AnyConnect install logs

11 bytes
ac-logs

AnyConnect_pre3.0.txt

AnyConnect application logs

AnyConnect.txt

AnyConnect application logs

AnyConnect.evtx

AnyConnect application logs

2.11M
ac-logs
2.23M
ac-logs
4.07M
ac-profile

glvpn-anyconnect-profile.xml AnyConnect Profile

9.40K

ac-profile

AnyConnectProfile.xsd

AnyConnect Profile

UIHistory_20160210_023723_l

AnyConnect UI XML Log Files

81.53K
ac-ui-logs
7.63K
og.txt
global-preferenc preferences_global.xml
562 bytes
es

AnyConnect Global Preferences

user-preferences preferences.xml
AnyConnect User Preferences
551 bytes
va-runtime
setupapi.app.log
Virtual Adapter runtime logs
161 bytes
va-runtime
setupapi.dev.log
Virtual Adapter runtime logs
1.16M
---------------------------------------------------------------------------------------------------Files Omitted from Bundle:
ID
Filename
Description
Reason Omitted
--------------------------------------------------------------------------------

------------------------------------------------------------ac-config
N/A
AnyConnect Configurations
No file found with path matching:
ac-dmp

C:\WINDOWS\System32\drivers\etc\hosts.ac
vpnui.exe_*.mdmp
AnyConnect program Dump Files
C:\WINDOWS\Temp\vpnui.exe_*.mdmp not found on

ac-dmp

client machine.
vpndownloader.exe_*.mdmp
AnyConnect program Dump Files
C:\WINDOWS\Temp\vpndownloader.exe_*.mdmp not

ac-dmp

found on client machine.

vpnagent.exe_*.mdmp
AnyConnect program Dump Files
C:\WINDOWS\Temp\vpnagent.exe_*.mdmp not found on

ac-dmp

client machine.
vpnui.exe_*.mdmp
AnyConnect program Dump Files
C:\Users\ARUNBH~1\AppData\Local\Temp\vpnui.exe_*.

ac-dmp

mdmp not found on client machine.

vpncli.exe_*.mdmp
AnyConnect program Dump Files
C:\Users\ARUNBH~1\AppData\Local\Temp\vpncli.exe_*

ac-dmp

.mdmp not found on client machine.

vpndownloader.exe_*.mdmp
AnyConnect program Dump Files
C:\Users\ARUNBH~1\AppData\Local\Temp\vpndownloade

ac-dmp

r.exe_*.mdmp not found on client machine.

vpndownloader.exe_*.mdmp
AnyConnect program Dump Files
C:\Users\ARUNBH~1\AppData\Local\Temp\low\vpndownl

ac-install

oader.exe_*.mdmp not found on client machine.

N/A
AnyConnect install logs
No file found with path matching:
C:\Users\ARUNBH~1\AppData\Local\Temp\anyconnect-w
in-*.log

ac-install

N/A
No file found with path matching:

AnyConnect install logs

ac-install

C:\WINDOWS\Temp\anyconnect-win-*.log
VPNManifest_pre3.0.dat
AnyConnect install logs
DART cannot access temporary output at:
C:\Users\ARUNBH~1\AppData\Local\Temp\VPNManifest_

ac-install

ac-logs

pre3.0.dat as specified by Config

AnyConnectLocalPolicy_pre3. AnyConnect install logs
DART cannot access temporary output at:
0.xml
C:\Users\ARUNBH~1\AppData\Local\Temp\AnyConnectLo
calPolicy_pre3.0.xml as specified by Config
AnyConnect_pre3.0.evtx
AnyConnect application logs
DART cannot access temporary output at:
C:\Users\ARUNBH~1\AppData\Local\Temp\AnyConnect_p

ac-logs

re3.0.evtx as specified by Config

N/A
No file found with path matching:

ac-logs

C:\WINDOWS\Temp\debug_routechangesv4.txt
N/A
AnyConnect application logs
No file found with path matching:

ac-profile

C:\WINDOWS\Temp\debug_routechangesv6.txt
N/A
AnyConnect Profile
No file found with path matching:

AnyConnect application logs

C:\ProgramData\Cisco\Cisco AnyConnect VPN

Client\Profile\*.xml
N/A
No file found with path matching:

ac-profile

AnyConnect Profile

C:\ProgramData\Cisco\Cisco AnyConnect VPN

Client\Profile\*.xsd
N/A
No file found with path matching:

ac-script

AnyConnect Scripting

C:\ProgramData\Cisco\Cisco AnyConnect VPN

Client\Script\*.*
global-preferenc preferences_global_pre3.0.x AnyConnect Global Preferences
DART cannot access temporary output at:
es
ml
C:\Users\ARUNBH~1\AppData\Local\Temp\preferences_
global_pre3.0.xml as specified by Config
sbl-install
N/A
Start Before Logon GINA and PLA
P
No file found with path matching:
install logs
C:\Users\ARUNBH~1\AppData\Local\Temp\anyconnect-g
ina-win-*.log
sbl-install
N/A
P
No file found with path matching:

Start Before Logon GINA and PLA

install logs
C:\WINDOWS\Temp\anyconnect-gina-win-*.log
sbl-runtime
vpngina_*_log.txt
Start Before Logon runtime logs
C:\ProgramData\Cisco\Cisco AnyConnect VPN
Client\Logs\vpngina_*_log.txt not found on client
machine.
sbl-runtime

vpngina_*_log.txt
Start Before Logon runtime logs
C:\ProgramData\Cisco\Cisco AnyConnect Secure
Mobility Client\Logs\vpngina_*_log.txt not found

on client machine.
user-preferences preferences_pre3.0.xml
AnyConnect User Preferences
DART cannot access temporary output at:
C:\Users\ARUNBH~1\AppData\Local\Temp\preferences_

pre3.0.xml as specified by Config

-------------------------------------------------------------------------------------------------------------------------------------------================================================================================
=============================================================
General Information:
Files Included in Bundle:
ID
Filename
Description
File Size
---------------------------------------------------------------------------------------------------application-logs Application.evtx
Application logs
9.07M
dart-event-logs
DART.evtx
DART Logs
68.00K
ipconfig
ipconfig_result.txt
Interface Configuration
13.91K
ipconfig
RegTcpipParametersAdapters. Interface Configuration
37.31K
txt
ipconfig

RegTcpipParametersInterface

Interface Configuration

42.04K
s.txt
ipconfig

RegNetBTParametersInterface

Interface Configuration

14.35K
s.txt
route

route_result.txt

Route Information

netsh_result.txt

Route Information

netsh_result.txt

Route Information

netsh_result.txt

Route Information

netsh_result.txt

Route Information

netsh_result.txt

Route Information

systeminfo_result.txt

System Information

msinfo.nfo

System Information

5.05K
route
32.65K
route
78.24K
route
89.90K
route
479.34K
route
479.92K
sysinfo
8.17K
sysinfo
2.31M
system-logs

System.evtx
System logs
7.07M
---------------------------------------------------------------------------------------------------================================================================================
=============================================================
Cisco AnyConnect ISE Posture Module:
Files Included in Bundle:
ID
Filename
Description
File Size
--------------------------------------------------------------------------------

--------------------ise-posture-logs AnyConnect_ISEPosture.txt
ISE Posture application logs
2.11M
---------------------------------------------------------------------------------------------------Files Omitted from Bundle:
ID
Filename
Description
Reason Omitted
-------------------------------------------------------------------------------------------------------------------------------------------ise-posture-logs AnyConnect_ISEPosture.evtx
ISE Posture application logs
DART cannot access temporary output at:
C:\Users\ARUNBH~1\AppData\Local\Temp\AnyConnect_I
SEPosture.evtx as specified by Config
ise-posture-logs N/A
ISE Posture application logs
No file found with path matching:
C:\ProgramData\Cisco\Cisco AnyConnect Secure
Mobility Client\Logs\aciseposture.log
ise-posture-logs N/A
ISE Posture application logs
No file found with path matching:
C:\ProgramData\Cisco\Cisco AnyConnect Secure
Mobility Client\ISE Posture\ConnectionData.xml
ise-posture-logs N/A
ISE Posture application logs
No file found with path matching:
C:\ProgramData\Cisco\Cisco AnyConnect Secure
Mobility Client\ISE Posture\ISEPostureCFG.xml
iseposture-dmp
acise.exe*.mdmp
AnyConnect ISE Posture Dump Fil
es
C:\Users\ARUNBH~1\AppData\Local\Temp\acise.exe*.m
dmp not found on client machine.
iseposture-dmp
aciseposture.exe*.mdmp
AnyConnect ISE Posture Dump Fil
es
C:\Users\ARUNBH~1\AppData\Local\Temp\aciseposture
.exe*.mdmp not found on client machine.
iseposture-dmp
aciseagent.exe*.mdmp
AnyConnect ISE Posture Dump Fil
es
C:\Users\ARUNBH~1\AppData\Local\Temp\aciseagent.e
xe*.mdmp not found on client machine.
-------------------------------------------------------------------------------------------------------------------------------------------================================================================================
=============================================================
Cisco AnyConnect Network Access Manager:
Files Included in Bundle:
ID
Filename
Description
File Size
----------------------------------------------------------------------------------------------------

nam-logs

NetworkAccessManager.txt
NAM application logs
520.37K
---------------------------------------------------------------------------------------------------Files Omitted from Bundle:
ID
Filename
Description
Reason Omitted
-------------------------------------------------------------------------------------------------------------------------------------------nam-dmp
*.dmp
NAM Program Dump Files
C:\ProgramData\Cisco\Cisco AnyConnect Secure
Mobility Client\Network Access Manager\logs\*.dmp
not found on client machine.
N/A
No file found with path matching:

nam-install

NAM install logs

C:\Users\ARUNBH~1\AppData\Local\Temp\anyconnect-n
am-*.log
nam-install

N/A
No file found with path matching:

NAM install logs

C:\WINDOWS\Temp\anyconnect-nam-*.log
N/A
NAM application logs
No file found with path matching:

nam-logs

C:\ProgramData\Cisco\Cisco AnyConnect Secure

Mobility Client\Network Access Manager\logs\*.cap
NetworkAccessManager.evtx
NAM application logs
DART cannot access temporary output at:

nam-logs

C:\Users\ARUNBH~1\AppData\Local\Temp\NetworkAcces
sManager.evtx as specified by Config
N/A
NAM application logs
Failed to execute acnampkgplugin.exe
nam-profile
N/A
NAM Profiles
No file found with path matching:
nam-logs

C:\ProgramData\Cisco\Cisco AnyConnect Secure

Mobility Client\Network Access
Manager\system\*.xml
N/A
No file found with path matching:

nam-profile

NAM Profiles

C:\ProgramData\Cisco\Cisco AnyConnect Secure

Mobility Client\Network Access
Manager\system\*.dat
--------------------------------------------------------------------------------------------------------------------------------------------

================================================================================
=============================================================
Cisco AnyConnect Posture Module:
Files Included in Bundle:
ID
Filename
Description
File Size
---------------------------------------------------------------------------------------------------posture-logs
Posture.txt
Posture application logs
2.11M
posture-logs
csd_sd_logs.txt
Posture application logs
75 bytes
posture-logs
csd_hostscan_logs.txt
Posture application logs
81 bytes
---------------------------------------------------------------------------------------------------Files Omitted from Bundle:
ID
Filename
Description
Reason Omitted
-------------------------------------------------------------------------------------------------------------------------------------------posture-dmp
cscan.exe*.mdmp
Posture dump files
C:\WINDOWS\Temp\cscan.exe*.mdmp not found on
client machine.
cstub.exe*.mdmp
Posture dump files
C:\WINDOWS\Temp\cstub.exe*.mdmp not found on

posture-dmp

client machine.
ciscod.exe*.mdmp
Posture dump files
C:\WINDOWS\Temp\ciscod.exe*.mdmp not found on

posture-dmp

client machine.
cnotify.exe*.mdmp
Posture dump files
C:\WINDOWS\Temp\cnotify.exe*.mdmp not found on

posture-dmp

client machine.
cscan.exe*.mdmp
Posture dump files
C:\Users\ARUNBH~1\AppData\Local\Temp\cscan.exe*.m

posture-dmp

dmp not found on client machine.

cstub.exe*.mdmp
Posture dump files
C:\Users\ARUNBH~1\AppData\Local\Temp\cstub.exe*.m

posture-dmp

dmp not found on client machine.

ciscod.exe*.mdmp
Posture dump files
C:\Users\ARUNBH~1\AppData\Local\Temp\ciscod.exe*.

posture-dmp

mdmp not found on client machine.

cnotify.exe*.mdmp
Posture dump files
C:\Users\ARUNBH~1\AppData\Local\Temp\cnotify.exe*

posture-dmp

.mdmp not found on client machine.

posture-logs
N/A
Posture application logs
No file found with path matching: C:\Users\Arun
Bharadwaj M\AppData\Local\Cisco\Cisco

HostScan\log\*
posture-logs
N/A
No file found with path matching:

Posture application logs

C:\Users\ARUNBH~1\AppData\Local\Temp\anyconnect-p
osture-win-*.log
posture-logs
N/A
No file found with path matching:

Posture application logs

C:\WINDOWS\Temp\anyconnect-posture-win-*.log
posture-logs
Posture.evtx
Posture application logs
DART cannot access temporary output at:
C:\Users\ARUNBH~1\AppData\Local\Temp\Posture.evtx
as specified by Config
posture-logs
csd_logs.txt
Posture application logs
DART cannot access temporary output at:
C:\WINDOWS\temp\csd_logs.txt as specified by
Config
posture-logs
csd_3.4.log
Posture application logs
DART cannot access temporary output at:
C:\Users\ARUNBH~1\AppData\Local\Temp\csd_3.4.log
as specified by Config
posture-logs
hostscan_3.4.log
Posture application logs
DART cannot access temporary output at:
C:\Users\ARUNBH~1\AppData\Local\Temp\hostscan_3.4
.log as specified by Config
posture-logs
hostscan_vault.log
Posture application logs
DART cannot access temporary output at:
C:\Users\ARUNBH~1\AppData\Local\Temp\hostscan_vau
lt.log as specified by Config
posture-logs
csd_3.4_SBL.log
Posture application logs
DART cannot access temporary output at:
C:\Users\ARUNBH~1\AppData\Local\Temp\csd_3.4_SBL.
log as specified by Config
posture-logs
csd_3.4_SBL.log
Posture application logs
DART cannot access temporary output at:
C:\Users\ARUNBH~1\AppData\Local\Temp\csd_3.4_SBL.
log as specified by Config
posture-logs
hostscan_3.4_SBL.log
Posture application logs
DART cannot access temporary output at:
C:\Users\ARUNBH~1\AppData\Local\Temp\hostscan_3.4
_SBL.log as specified by Config

posture-logs
hostscan_3.4_SBL.log
Posture application logs
DART cannot access temporary output at:
C:\Users\ARUNBH~1\AppData\Local\Temp\hostscan_3.4
_SBL.log as specified by Config
posture-logs
hostscan_SBL.log
Posture application logs
DART cannot access temporary output at:
C:\Users\ARUNBH~1\AppData\Local\Temp\hostscan_SBL
.log as specified by Config
posture-logs
hostscan_SBL.log
Posture application logs
DART cannot access temporary output at:
C:\Users\ARUNBH~1\AppData\Local\Temp\hostscan_SBL
.log as specified by Config
-------------------------------------------------------------------------------------------------------------------------------------------================================================================================
=============================================================
Cisco AnyConnect Telemetry Module:
Files Included in Bundle:
ID
Filename
Description
File Size
---------------------------------------------------------------------------------------------------telemetry-logs
Telemetry.txt
Telemetry application logs
2.11M
---------------------------------------------------------------------------------------------------Files Omitted from Bundle:
ID
Filename
Description
Reason Omitted
-------------------------------------------------------------------------------------------------------------------------------------------telemetry-dmp
*.*
Telemetry Data Dump File
C:\ProgramData\Cisco\Cisco AnyConnect Secure
Mobility Client\Telemetry\log\*.* not found on
client machine.
telemetry-logs
N/A
No file found with path matching:

Telemetry application logs

C:\Users\ARUNBH~1\AppData\Local\Temp\anyconnect-t
elemetry-win-*.log
telemetry-logs
N/A
No file found with path matching:

Telemetry application logs

C:\WINDOWS\Temp\anyconnect-telemetry-win-*.log
telemetry-logs
Telemetry.evtx
Telemetry application logs
DART cannot access temporary output at:

C:\Users\ARUNBH~1\AppData\Local\Temp\Telemetry.ev
tx as specified by Config
telemetry-profile N/A
No file found with path matching:

Telemetry Profile

C:\ProgramData\Cisco\Cisco AnyConnect Secure

Mobility Client\Telemetry\*.xml
-------------------------------------------------------------------------------------------------------------------------------------------================================================================================
=============================================================
Cisco AnyConnect WebSecurity Module:
Files Included in Bundle:
ID
Filename
Description
File Size
---------------------------------------------------------------------------------------------------ws-logs
WebSecurity.txt
WebSecurity application logs
2.11M
---------------------------------------------------------------------------------------------------Files Omitted from Bundle:
ID
Filename
Description
Reason Omitted
-------------------------------------------------------------------------------------------------------------------------------------------ws-dmp
acwebsec*.mdmp
WebSecurity dump files
C:\WINDOWS\Temp\acwebsec*.mdmp not found on
ws-dmp

client machine.
acwebsec*.mdmp
WebSecurity dump files
C:\Users\ARUNBH~1\AppData\Local\Temp\acwebsec*.md

ws-install

mp not found on client machine.

N/A
No file found with path matching:

WebSecurity install logs

C:\ProgramData\Cisco\Cisco AnyConnect Secure

ws-install

Mobility Client\Web Security\WebSecurityCert.cfg

N/A
WebSecurity install logs
No file found with path matching:
C:\ProgramData\Cisco\Cisco AnyConnect Secure
Mobility Client\Web

ws-install

Security\WebSecurity_ServiceProfile.wso
N/A
WebSecurity install logs
No file found with path matching:
C:\ProgramData\Cisco\Cisco AnyConnect Secure
Mobility Client\Web

ws-install

Security\Config\WebSecurity.config
N/A
No file found with path matching:

WebSecurity install logs

C:\ProgramData\Cisco\Cisco AnyConnect Secure

Mobility Client\Web
ws-install

Security\Config\WebSecurity_config.backup
N/A
WebSecurity install logs
No file found with path matching:
C:\ProgramData\Cisco\Cisco AnyConnect Secure

ws-install

Mobility Client\Web Security\Logs\*

N/A
No file found with path matching:

WebSecurity install logs

C:\Users\ARUNBH~1\AppData\Local\Temp\anyconnect-w
ws-install

ebsecurity-*.log
N/A
No file found with path matching:

ws-logs

C:\WINDOWS\Temp\anyconnect-websecurity-*.log
WebSecurity.evtx
WebSecurity application logs
DART cannot access temporary output at:

WebSecurity install logs

C:\Users\ARUNBH~1\AppData\Local\Temp\WebSecurity.
evtx as specified by Config
-------------------------------------------------------------------------------------------------------------------------------------------No instruction found in any config for the following file ID's from request: