Understanding the output of deploy and Run task

With Windows content, endpoint scans are accomplished by a series of Windows powershell scripts that provide greater accessibility to Windows system administrators.

In BigFix, Fixlets continuously evaluate conditions on each endpoint, displaying results in the console when their relevance clauses of the Fixlets evaluate to true or false. For Windows systems, the "Deploy and Run Task" within a Security Checklist initiates a scan of the endpoints. This scan can be executed on an ad hoc basis whenever a scan is required or configured as a recurring policy from the console.​

The endpoint scan is carried out by various Windows powershell scripts available within the Deploy and Run tasks. These scripts write the information to an output file, which is then used by the corresponding Fixlet checks for evaluation. Once the results files are written to disk, the Fixlets read the output and display the results in the console.

After executing the Deploy and Run task from the Security Checklist, the scripts run and store the results under the directory:C:\Program Files (x86)\BigFix Enterprise\BES Client\__BESData\__SCMData, which contains several components as detailed below:
Table 1. Deploy and Run task result file structure
CIS_secpol.txt This output file stores security policies of particular CIS Fixlets.
DISA_secpol.txt This output file stores security policies of particular DISA Fixlets.
Universal_secpol.txt This output file stores security policies of particular Universal Checklist Fixlets.