Skip to content

Commit 1fb6f9c

Browse files
authored
Merge pull request #700 from ProVal-Tech/origin-new-cw-automate-solution-installed-ai-tools-audit
Approved
2 parents 72352ed + 0faf119 commit 1fb6f9c

7 files changed

Lines changed: 308 additions & 0 deletions

File tree

Lines changed: 51 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,51 @@
1+
---
2+
id: '1ca43737-1bb0-4adf-be79-a6b9c3eaec54'
3+
slug: /1ca43737-1bb0-4adf-be79-a6b9c3eaec54
4+
title: 'Installed AI Tools Audit'
5+
title_meta: 'Installed AI Tools Audit'
6+
keywords: ['audit', 'ai', 'ai-tools', 'audit-ai-tools', 'installed-ai', 'installed-ai-tools', 'installed-ai-applications']
7+
description: 'Displays the list of installed AI Tools on Windows workstations.'
8+
tags: ['auditing', 'windows']
9+
draft: false
10+
unlisted: false
11+
last_update:
12+
date: 2026-06-01
13+
---
14+
15+
## Summary
16+
17+
Displays the installed AI software audit results for Windows workstations, populated from the [pvl_installed_ai_applications_audit](/docs/fcd315e9-e261-4553-a9c3-8440f748cdc6) custom table by the [Audit Installed AI Tools](/docs/f4273886-5b8f-11f1-b684-92000234cfc2) script. Use this dataview to easily review and track exactly which Artificial Intelligence applications, frameworks, and coding assistants are installed across your device fleet, including version details and discovery locations.
18+
19+
## Dependencies
20+
21+
- [Script: Audit Installed AI Tools](/docs/f4273886-5b8f-11f1-b684-92000234cfc2)
22+
- [Custom Table: pvl_installed_ai_applications_audit](/docs/fcd315e9-e261-4553-a9c3-8440f748cdc6)
23+
- [Internal Monitor: Execute Script - Audit Installed AI Tools](/docs/b5f4d983-bd00-4f9f-9ec6-b385781f0164)
24+
- [Solution: Installed AI Tools Audit](/docs/e1783dde-9fda-4c89-80b3-0f5ecc73382c)
25+
26+
## Columns
27+
28+
| Column | Description |
29+
| --- | --- |
30+
| `ClientID` | The unique identifier of the client. (Hidden) |
31+
| `LocationID` | The unique identifier of the location. (Hidden) |
32+
| `ComputerID` | The unique identifier of the computer. (Hidden) |
33+
| `Client` | The name of the client for this computer. |
34+
| `Location` | The name of the location for this computer. |
35+
| `Computer` | The name of the computer where the audit was performed. |
36+
| `OperatingSystem` | The OS installed on the endpoint. |
37+
| `LastContact` | The last check-in date of the agent. |
38+
| `LastLoggedInUser` | The last user logged into the device. |
39+
| `FormFactor` | The physical form factor of the machine. |
40+
| `AIApplicationName` | The display name of the detected AI application. |
41+
| `AIApplicationVersion` | The specific version number of the installed application. |
42+
| `AIApplicationPublisher` | The software vendor, creator, or developer of the application. |
43+
| `AIApplicationInstallDate` | The date when the application was originally installed on the device. |
44+
| `DataSource` | The system location where the application was discovered during the scan (e.g., SystemRegistry, UserRegistry, or AppxPackage). |
45+
| `DataCollectionTime` | Timestamp of when the audit script last ran and populated this record. |
46+
47+
## Changelog
48+
49+
### 2026-06-01
50+
51+
- Initial version of the document
Lines changed: 37 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,37 @@
1+
---
2+
id: 'b5f4d983-bd00-4f9f-9ec6-b385781f0164'
3+
slug: /b5f4d983-bd00-4f9f-9ec6-b385781f0164
4+
title: 'Execute Script - Audit Installed AI Tools'
5+
title_meta: 'Execute Script - Audit Installed AI Tools'
6+
keywords: ['audit', 'ai', 'ai-tools', 'audit-ai-tools', 'installed-ai', 'installed-ai-tools', 'installed-ai-applications']
7+
description: 'Executes auditing script once per week against Windows Workstations.'
8+
tags: ['auditing', 'windows']
9+
draft: false
10+
unlisted: false
11+
last_update:
12+
date: 2026-06-01
13+
---
14+
15+
## Summary
16+
17+
This monitor executes the [Audit Installed AI Tools](/docs/f4273886-5b8f-11f1-b684-92000234cfc2) script once per week against Windows Workstations.
18+
19+
## Dependencies
20+
21+
- [Script: Audit Installed AI Tools](/docs/f4273886-5b8f-11f1-b684-92000234cfc2)
22+
- [Custom Table: pvl_installed_ai_applications_audit](/docs/fcd315e9-e261-4553-a9c3-8440f748cdc6)
23+
- [Solution: Installed AI Tools Audit](/docs/e1783dde-9fda-4c89-80b3-0f5ecc73382c)
24+
25+
## Target
26+
27+
Global
28+
29+
## Alert Template
30+
31+
- `△ Custom - Execute Script - Audit Installed AI Tools`
32+
33+
## Changelog
34+
35+
### 2026-06-01
36+
37+
- Initial version of the document
Lines changed: 76 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,76 @@
1+
---
2+
id: 'f4273886-5b8f-11f1-b684-92000234cfc2'
3+
slug: /f4273886-5b8f-11f1-b684-92000234cfc2
4+
title: 'Audit Installed AI Tools'
5+
title_meta: 'Audit Installed AI Tools'
6+
keywords: ['audit', 'ai', 'ai-tools', 'audit-ai-tools', 'installed-ai', 'installed-ai-tools', 'installed-ai-applications']
7+
description: 'Retrieves a list of installed AI applications on the system.'
8+
tags: ['auditing', 'windows']
9+
draft: false
10+
unlisted: false
11+
last_update:
12+
date: 2026-06-01
13+
---
14+
15+
## Summary
16+
17+
This script scans Windows machines and identify if any Artificial Intelligence (AI) software, tools, or frameworks are currently installed. The automated process thoroughly checks system-level installations, user-level installations, and background app packages to compile a list of recognized AI applications.
18+
19+
Once the scan is complete, the data is fetched and displayed by the [Installed AI Tools Audit](/docs/1ca43737-1bb0-4adf-be79-a6b9c3eaec54). All information regarding installed AI applications can be retrieved directly from that dataview.
20+
21+
- **If the dataview displays applications:** These are the AI tools currently detected on the machine, along with version details and installation dates.
22+
- **If the dataview is empty:** Assuming the script ran successfully, an empty dataview means there was no recognized AI application installed on the computer.
23+
- **Troubleshooting:** Script logs can be checked to verify successful execution or to investigate any scanning issues.
24+
25+
## Currently Audited AI Applications
26+
27+
The audit actively looks for the following AI tools, grouped by category or parent company:
28+
29+
| Category | Targeted Applications & Keywords |
30+
| --- | --- |
31+
| **Microsoft & OpenAI** | `Copilot`, `ChatGPT`, `OpenAI`, `Codex`, `DALL-E`, `GitHub Copilot` |
32+
| **Google** | `Gemini`, `Bard`, `Vertex AI`, `Google AI Studio` |
33+
| **Anthropic** | `Claude`, `Anthropic` |
34+
| **Meta & xAI** | `LLaMA`, `Meta AI`, `Grok` |
35+
| **Local AI Desktop Apps** | `LM Studio`, `Ollama`, `GPT4All`, `Jan`, `AnythingLLM`, `NVIDIA ChatRTX`, `ChatRTX`, `Msty`, `Faraday` |
36+
| **AI Coding Assistants** | `Cursor`, `Windsurf`, `Codeium`, `Cody`, `Supermaven`, `Tabnine`, `Replit AI` |
37+
| **Image & Creative AI** | `Stable Diffusion`, `ComfyUI`, `InvokeAI`, `Fooocus`, `Automatic1111`, `DreamStudio`, `Midjourney`, `Leonardo AI`, `Clipdrop`, `Krea`, `Canva AI`, `Firefly`, `Adobe Sensei` |
38+
| **Marketing & Copywriting** | `Jasper`, `Copy.ai`, `Writesonic`, `Rytr`, `Anyword` |
39+
| **Search & Chatbots** | `Perplexity`, `You.com`, `YouChat`, `Phind`, `Character.AI`, `Poe`, `Pi`, `Inflection` |
40+
| **Cloud & Enterprise AI** | `Amazon Q`, `SageMaker`, `Watson`, `Databricks`, `Dolly`, `AI21`, `Jurassic` |
41+
| **Frameworks & Platforms** | `Vercel AI`, `Botpress`, `LangChain`, `Flowise`, `Hugging Face`, `Transformers`, `Replicate`, `Groq`, `EleutherAI`, `GPT-NeoX` |
42+
| **Other Global AI Models** | `Ernie`, `Mistral`, `Codestral`, `Falcon`, `DeepSeek`, `Cohere`, `Runway`, `RunwayML` |
43+
44+
## Dependencies
45+
46+
- [Solution: Installed AI Tools Audit](/docs/e1783dde-9fda-4c89-80b3-0f5ecc73382c)
47+
48+
## Sample Run
49+
50+
### First Run
51+
52+
Run the script with the `Set_Environment` parameter set to `1` after import to create the custom table [pvl_installed_ai_applications_audit](/docs/fcd315e9-e261-4553-a9c3-8440f748cdc6).
53+
54+
![Image1](../../../static/img/docs/f4273886-5b8f-11f1-b684-92000234cfc2/image1.webp)
55+
56+
### Regular Execution
57+
58+
![Image2](../../../static/img/docs/f4273886-5b8f-11f1-b684-92000234cfc2/image2.webp)
59+
60+
## User Parameters
61+
62+
| Name | Example | Required | Description |
63+
|----------|---------|----------|-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
64+
| `Set_Environment` | `1` | `First Run Only` | If set to `1` it will create the custom table [pvl_installed_ai_applications_audit](/docs/fcd315e9-e261-4553-a9c3-8440f748cdc6). |
65+
66+
## Output
67+
68+
- Script Logs
69+
- [Custom Table: pvl_installed_ai_applications_audit](/docs/fcd315e9-e261-4553-a9c3-8440f748cdc6)
70+
- [Dataview: Installed AI Tools Audit](/docs/1ca43737-1bb0-4adf-be79-a6b9c3eaec54)
71+
72+
## Changelog
73+
74+
### 2026-06-01
75+
76+
- Initial version of the document
Lines changed: 42 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,42 @@
1+
---
2+
id: 'fcd315e9-e261-4553-a9c3-8440f748cdc6'
3+
slug: /fcd315e9-e261-4553-a9c3-8440f748cdc6
4+
title: 'pvl_installed_ai_applications_audit'
5+
title_meta: 'pvl_installed_ai_applications_audit'
6+
keywords: ['audit', 'ai', 'ai-tools', 'audit-ai-tools', 'installed-ai', 'installed-ai-tools', 'installed-ai-applications']
7+
description: 'Stores the installed software audit results collected by the Audit Installed AI Tools script.'
8+
tags: ['auditing', 'windows']
9+
draft: false
10+
unlisted: false
11+
last_update:
12+
date: 2026-06-01
13+
---
14+
15+
## Purpose
16+
17+
Stores the installed software audit results collected by the [Audit Installed AI Tools](/docs/f4273886-5b8f-11f1-b684-92000234cfc2) script. Each row represents a specific Artificial Intelligence application detected on a managed Windows device, recording details such as the application name, version, publisher, installation date, and the specific system source where it was discovered. This table directly powers the [Installed AI Tools Audit](/docs/1ca43737-1bb0-4adf-be79-a6b9c3eaec54) dataview, allowing the collected data to be seamlessly viewed and analyzed within the graphical user interface.
18+
19+
## Dependencies
20+
21+
- [Script: Audit Installed AI Tools](/docs/f4273886-5b8f-11f1-b684-92000234cfc2)
22+
- [Solution: Installed AI Tools Audit](/docs/e1783dde-9fda-4c89-80b3-0f5ecc73382c)
23+
24+
## Tables
25+
26+
### pvl_installed_ai_applications_audit
27+
28+
| Property | Type | Description |
29+
| --- | --- | --- |
30+
| `ComputerID` | Int | The unique identifier of the computer. |
31+
| `Name` | Varchar | The display name of the detected AI application. |
32+
| `Version` | Varchar | The specific version number of the installed application. |
33+
| `Publisher` | Varchar | The software vendor, creator, or developer of the application. |
34+
| `InstallDate` | DateTime | The date when the application was originally installed on the device. |
35+
| `Source` | Varchar | The system location where the application was discovered during the scan (e.g., System Registry, User Registry, or Appx Package). |
36+
| `DataCollectionTime` | DateTime | The exact timestamp of when the audit script ran and gathered this specific record. |
37+
38+
## Changelog
39+
40+
### 2026-06-01
41+
42+
- Initial version of the document
Lines changed: 102 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,102 @@
1+
---
2+
id: 'e1783dde-9fda-4c89-80b3-0f5ecc73382c'
3+
slug: /e1783dde-9fda-4c89-80b3-0f5ecc73382c
4+
title: 'Installed AI Tools Audit'
5+
title_meta: 'Installed AI Tools Audit'
6+
keywords: ['audit', 'ai', 'ai-tools', 'audit-ai-tools', 'installed-ai', 'installed-ai-tools', 'installed-ai-applications']
7+
description: 'Audits and displays installed AI Tools on Windows Workstations.'
8+
tags: ['auditing', 'windows']
9+
draft: false
10+
unlisted: false
11+
last_update:
12+
date: 2026-06-01
13+
---
14+
15+
## Purpose
16+
17+
The goal of this solution is to audit Windows Workstations to identify installed Artificial Intelligence (AI) software, tools, or frameworks. It automatically checks system-level installations, user-level installations, and background app packages to compile a list of recognized AI applications. The solution collects data on the application name, version, publisher, installation date, and source location, storing the results in a custom table for easy fleet-wide reporting and tracking.
18+
19+
## Currently Audited AI Applications
20+
21+
The audit actively looks for the following AI tools, grouped by category or parent company:
22+
23+
| Category | Targeted Applications & Keywords |
24+
| --- | --- |
25+
| **Microsoft & OpenAI** | `Copilot`, `ChatGPT`, `OpenAI`, `Codex`, `DALL-E`, `GitHub Copilot` |
26+
| **Google** | `Gemini`, `Bard`, `Vertex AI`, `Google AI Studio` |
27+
| **Anthropic** | `Claude`, `Anthropic` |
28+
| **Meta & xAI** | `LLaMA`, `Meta AI`, `Grok` |
29+
| **Local AI Desktop Apps** | `LM Studio`, `Ollama`, `GPT4All`, `Jan`, `AnythingLLM`, `NVIDIA ChatRTX`, `ChatRTX`, `Msty`, `Faraday` |
30+
| **AI Coding Assistants** | `Cursor`, `Windsurf`, `Codeium`, `Cody`, `Supermaven`, `Tabnine`, `Replit AI` |
31+
| **Image & Creative AI** | `Stable Diffusion`, `ComfyUI`, `InvokeAI`, `Fooocus`, `Automatic1111`, `DreamStudio`, `Midjourney`, `Leonardo AI`, `Clipdrop`, `Krea`, `Canva AI`, `Firefly`, `Adobe Sensei` |
32+
| **Marketing & Copywriting** | `Jasper`, `Copy.ai`, `Writesonic`, `Rytr`, `Anyword` |
33+
| **Search & Chatbots** | `Perplexity`, `You.com`, `YouChat`, `Phind`, `Character.AI`, `Poe`, `Pi`, `Inflection` |
34+
| **Cloud & Enterprise AI** | `Amazon Q`, `SageMaker`, `Watson`, `Databricks`, `Dolly`, `AI21`, `Jurassic` |
35+
| **Frameworks & Platforms** | `Vercel AI`, `Botpress`, `LangChain`, `Flowise`, `Hugging Face`, `Transformers`, `Replicate`, `Groq`, `EleutherAI`, `GPT-NeoX` |
36+
| **Other Global AI Models** | `Ernie`, `Mistral`, `Codestral`, `Falcon`, `DeepSeek`, `Cohere`, `Runway`, `RunwayML` |
37+
38+
## Associated Content
39+
40+
### Script
41+
42+
| Content | Type | Function |
43+
| --- | --- | --- |
44+
| [Audit Installed AI Tools](/docs/f4273886-5b8f-11f1-b684-92000234cfc2) | Script | Runs the audit against Windows machines to identify installed AI applications and stores the results in the custom table. |
45+
46+
### Monitor
47+
48+
| Content | Type | Function |
49+
| --- | --- | --- |
50+
| [Execute Script - Audit Installed AI Tools](/docs/b5f4d983-bd00-4f9f-9ec6-b385781f0164) | Internal Monitor | Executes the auditing script once per week against Windows Workstations. |
51+
52+
### Alert Template
53+
54+
| Content | Type | Function |
55+
| --- | --- | --- |
56+
| `△ Custom - Execute Script - Audit Installed AI Tools` | Alert Template | Executes the [Audit Installed AI Tools](/docs/f4273886-5b8f-11f1-b684-92000234cfc2) script against the machines detected by the internal monitor. |
57+
58+
### Data and Reporting
59+
60+
| Content | Type | Function |
61+
| --- | --- | --- |
62+
| [pvl_installed_ai_applications_audit](/docs/fcd315e9-e261-4553-a9c3-8440f748cdc6) | Custom Table | Stores the installed software audit results collected from each device. |
63+
| [Installed AI Tools Audit](/docs/1ca43737-1bb0-4adf-be79-a6b9c3eaec54) | Dataview | Displays the installed AI software audit results for fleet-wide review and tracking. |
64+
65+
## Implementation
66+
67+
1. Import the associated script, internal monitor, dataview, and alert template from the ProSync plugin.
68+
2. Execute the [Audit Installed AI Tools](/docs/f4273886-5b8f-11f1-b684-92000234cfc2) script on any online Windows device with the `Set_Environment` parameter set to `1`. This creates the required [pvl_installed_ai_applications_audit](/docs/fcd315e9-e261-4553-a9c3-8440f748cdc6) custom table.
69+
3. Reload the system cache (**Ctrl + R**) and verify the custom table was created successfully.
70+
4. Configure the solution as follows:
71+
- Navigate to `Automation``Monitors` within the CWA Control Center and set up the following:
72+
- [Execute Script - Audit Installed AI Tools](/docs/b5f4d983-bd00-4f9f-9ec6-b385781f0164)
73+
- Configure with the alert template: `△ Custom - Execute Script - Audit Installed AI Tools`
74+
- Right-click and **Run Now** to start the monitor.
75+
76+
## FAQ
77+
78+
### 1: Why is the Installed AI Tools Audit dataview empty?
79+
80+
> If the dataview is empty, it means that the automated check ran successfully, but no recognized AI applications were found on the computer.
81+
> You can check the script logs to verify successful execution or to investigate any scanning issues.
82+
83+
### 2: How often does the automated audit run?
84+
85+
> The "Execute Script - Audit Installed AI Tools" internal monitor executes the auditing script once per week.
86+
> It is specifically targeted to run against Windows Workstations.
87+
88+
### 3: How do I initially set up the custom database table?
89+
90+
> For the first run, you must execute the script with the `Set_Environment` user parameter set to `1`.
91+
> This action automatically creates the required `pvl_installed_ai_applications_audit` custom table needed to store the collected data.
92+
93+
### 4: Where exactly does the script search for these applications?
94+
95+
> The script comprehensively checks system-level installations, user-level installations, and background Appx packages.
96+
> It detects these installations based on an extensive array of predefined keywords associated with known AI tools.
97+
98+
## Changelog
99+
100+
### 2026-06-01
101+
102+
- Initial version of the document.
8.86 KB
Loading
8.79 KB
Loading

0 commit comments

Comments
 (0)