We currently have Cylance installed on some of our Linux machines. I’m trying to create an analysis that will show me the version number. I have tried the following “version of packages whose (name of it contains “cylance”) of rpm” and it didn’t work. Any help would be appreciated.
The software is located in the following location.
/opt/cylance/desktop/cylance
On the linux box itself if I enter the command sudo /otp/cylance/desktop/cylance -v it gives me the version number.
If you run rpm -qa you should be able to list all installed RPM packages. Can you locate the package name for cylance and list the details here?
really just echoing @JasonWalker here, using the BESAgent as an example. Could it be case sensitivity?
[root@rgc74-vm1 ~]# rpm -qa | grep -i besagent
BESAgent-10.0.10.46-rhe6.x86_64
Q: version of packages whose (name of it as lowercase contains "besagent") of rpms
A: 10.0.10.46-rhe6
T: 1559274
I have encountered cases where the /var/lib/rpm folder has restritive persmissions which impedes the rpm helper, which runs as nobody, from accessing the rpm library and prevents any rpm info being inspected. If that were the case though it would impact more than trying to get the version of a specific application.
I’m not a linux guy and found out that we are using a Linuxfx Wxdesktop. I looked and there is nothing in the RPM folder. I ran the rpm -qa and nothing came back. I sent a screenshot of the service.
Understood. I’m not familiar with Linuxfx, but based on a bit of googling it appears to be an Ubuntu-based distro that features heavily on Windows compatibility using emulation from WINE.
I’m not sure whether it uses the apt package manager; let’s find out.
Do you get any results from running
apt list --installed
I don’t think its a package. The apt list --installed worked but cylance wasn’t in the list. I did apt search and this is the results.
I wonder if inspecting the library via the debianpackage inspector will yield any results? An apparoach I tend to favour for properties that may span differing Linux distros will check RPM if its RPM based or debianpackage for APT/DPKG based (I’m not of a Linux background myself but having to support Bigfix on all OS, it certainly does make one get a bit more into those other OS) 
Q: version of packages whose (name of it as lowercase contains "besagent") of (if exists properties whose (it as string contains "debianpackage:") then debianpackages else if exists properties whose (it as string contains "rpm:") then rpms else ERROR "The operators are not defined.")
A: 10.0.10.46Have you tried to use the following analysis - https://bigfix.me/analysis/details/2998050 - This analysis gathers data from both RPMs and Debianpackages
I was able to use the following to get it to work
if (exists operating system whose (it as string as lowercase contains “ubuntu”)) then ((((names of it, versions of it) of packages whose (name of it contains “cylance” as lowercase) of debianpackages) as string)) else (“Not Ubuntu” as string)