RE: : Does ACS emulator make calls to: sysinfo, whoami or netstat ?

[Richard Schoen <richard@xxxxxxxxxxxxxxxxx>]

I spoke with one of our venerable colleagues at IBM and they can't remember any of the details of the ACS code any more.  So no confirm or deny.

So what do I tell a MSP ?  "MAYBE 😊" 

It was suggested to do a procmon.exe.

I think mainly they want to make sure something troublesome isn't making these calls.  First time I've been asked this question.

Not sure how to reply definitively other than: MAYBE

Regards,
Richard Schoen
Web: http://www.richardschoen.net
Email: richard@xxxxxxxxxxxxxxxxx
------------------------------

message: 3
date: Wed, 9 Jul 2025 11:43:11 -0500
from: David Gibbs via MIDRANGE-L <midrange-l@xxxxxxxxxxxxxxxxxx>
subject: Re: Does ACS emulator make calls to: sysinfo, whoami or
	netstat ?

On Wed, Jul 9, 2025 at 11:39?AM David Gibbs <david@xxxxxxxxxxxx> wrote:
> I found references to 'net stats work', 'wmic os get lastbootuptime', 
> & 'reg.exe', so I think it's safe to assume there are others.

I also found references to these commands:

ver, systeminfo, netstat -anv -f inet -f inet6, netstat -pant, netstat -ona, whoami, net stats work, uptime, chcp, ps -Af, tasklist, lpq, lpstat -t -l, uname -a

david