How to determine and alert when there is a program installed on Windows Server 2008?

[nickbijmoer]

Hello guys I got a question,

How to determine when there is a program installed on Windows Server 2008?
I look at my logs, at application logs, but don't see when I install something like for example WinSCP.
I want these logs so i can alert in Splunk when someone installs a software product.

Anyone that can help me?

[gcusello]

Hi nickbijmoer
in Splunk_TA-Windows there is a scripted inputs (win_installed_apps.bat) that gives to you the list of all installed applications and the installation date.

Bye.
Giuseppe