When posting you should provide information about your environment using the following template:
GVM versions
I performed a scan on a windows system and noticed an empty file that was created in c:\windows. Is this normal behavior? gsad: (‘gsad --version’) gvmd: (‘gvmd --version’) openvas-scanner: (‘openvas --version’, in older GVM versions < 11: ‘openvassd --version’) gvm-libs:
Hi @lee_in_wv and thanks for the info. I checked with development and they told me that normally /windows should not be writable, and it looks like it could be a permissions issue.
Thanks for the follow up. I did use a credential with local administrator access for the smb login. Perhaps that is why.
I have used the same method scanning other windows systems and not noticed this.
Lee
Currently i’m missing the info in this topic which name this file has. It is only described as “an empty file” without mentioning the file name.
This could help to determine if the file was created during the scan (i’m not ware that any files are created during a scan) or if this was just by coincidence.