LAN scans, local checks, CVE review and lifecycle intelligence

Full Auditor or Software Watch?

Scantide now has two Windows PowerShell experiences. Use the Full Auditor when you want LAN and endpoint assessment. Use Software Watch when you only want installed-software inventory, CVE review and lifecycle/latest-version monitoring.

Required files

Keep the PowerShell scripts and helpers in the same folder. The complete ZIP is the safest starting point because it keeps the launcher, local check, helper files and version feed aligned.

$dest = Join-Path $env:USERPROFILE 'Downloads\ScantideAuditor'
New-Item -ItemType Directory -Path $dest -Force | Out-Null

$zip = Join-Path $dest 'Scantide_Full_Local_Files_3.5.216.zip'
Invoke-WebRequest -Uri 'https://www.scantide.com/helpfiles/Scantide_Full_Local_Files_3.5.216.zip' -OutFile $zip -UseBasicParsing -TimeoutSec 90
Expand-Archive -LiteralPath $zip -DestinationPath $dest -Force

Get-ChildItem -Path $dest -Filter '*.ps1' -Recurse | Unblock-File -ErrorAction SilentlyContinue

Write-Host ""
Write-Host "Downloaded Scantide Auditor PowerShell files to: $dest" -ForegroundColor Green
Write-Host "Examples:" -ForegroundColor Yellow
Write-Host "  cd `"$dest`""
Write-Host "  .\ScantideLauncher.ps1"
Write-Host "  .\ScantideLAN.ps1 -Network 192.168.0.0/24 -PortProfile Standard"
Write-Host "  .\ScantideLocalCheck.ps1 -CheckLevel Basic"
Write-Host "  .\ScantideLocalCheck.ps1 -OnlyChecks SoftwareInventory,SoftwareCve,SoftwareLifecycle -UseSavedScantideCredentials"

Community-driven software lifecycle intelligence

Maintaining a manually updated lifecycle database for every software product is not realistic. Vendors release new builds constantly, change naming schemes and keep different release channels alive at the same time. Scantide therefore combines catalog/API lookups with real-world observed software versions.

Software inventory, CVE review and lifecycle columns

The local software report is meant to reduce guesswork. It shows what is installed, whether CVE review signals exist, and whether Scantide has seen a newer version.

12-hour CVE and lifecycle cache

CVE and lifecycle lookups are cached locally for 12 hours by default. This keeps repeated scans fast, reduces API usage and avoids unnecessary repeated online calls during testing or Watch runs.

What the launcher does

The launcher is a GUI wrapper. It builds normal PowerShell commands, runs the scanner, shows live output, opens the newest report and helps manage helper files, credentials and tools.

Windows Credential Manager support

The launcher can save Scantide email/API key and ServiceNow username/password locally in Windows Credential Manager. This avoids plain-text configuration files and keeps secrets out of generated command previews.

How Add to exclusion works

A normal HTML report is not allowed to silently run PowerShell. Scantide therefore uses a small local helper and a temporary custom URL protocol for deliberate, user-clicked actions.

Exact-version CVE exclusions

When a CVE match has been manually reviewed and accepted as a false positive, suppress it for that exact software name and exact version only.

Watch behavior

Software Watch and Local Watch are intended for lightweight repeated software/CVE/lifecycle checks. They should not be confused with EDR, antivirus, a patch manager or proof of compromise.

Internal network scan examples

Frequently used parameters

Common issues

• Add to exclusion does nothing: start the launcher so it can register scantide-local://, or use the manual command shown in the report.
• Lifecycle says checked but no latest known: the software was submitted/checked, but Scantide does not yet have a useful latest-version signal for that exact product.
• Installed version appears newer than latest observed: treat this as branch/channel review. The software may be preview, beta, LTS, stable or packaged differently.
• Slow repeated CVE checks: confirm that cache files are writable under ProgramData or LocalAppData, and that the cache TTL is not set too low.
• API authentication fails: verify that saved Scantide API credentials are present in Windows Credential Manager and that the licensed email/API key pair is valid.

Frequently asked questions

Use the GUI tour beside this manual

The GUI tour page shows the Launcher layout and explains what each tab is for. It is useful for users who want to understand Quick Scan, discovery options, ServiceNow / CMDB, Local PC Check, Tools and Advanced settings before running the scripts.