Understanding .scan Files

Using octodump.exe

Octodump is a utility to decompress .scan files into their .xml format. It works on the current directory and processes all scan files found. The generated .xml files have the same timestamp information as the .scan file so that you can still sort the files or find out what files are newest to the system. Octodump can also be used to compress a .scan.xml file into the .scan format.

Alternatively most zip utilities should be able to decompress the .scan file.

Getting Summarized .scan File Information

Call Octodump with the /s option to generate a summary over multiple .scan files. The output is in .csv format, so that you can easily analyze it further in Excel or any text editor. Octodump uses its own internal parser to read the contents of the .scan file so that you can also analyze partial files or otherwise malformed files.

Analyzing .scan Files

environment Section

Shows basic information about the environment of the scan.

octoscan Section

Here you can find the build info for the Octoscan2 process that actually generated the file and the full path to the configuration file used for this scan.

octoscan_config Section

In this section, you find the configuration parameter values that were set after evaluating the configuration file. Three parameters that cannot be set through configuration are:

DoHardwareScan
DoSoftwareScan
DoUalScan

These parameters indicate if hardware, software or UAL scans are to be performed, considering the configuration, scan period settings and timestamp value on the current machine.