Skip to main content
Participant
November 12, 2020
Answered

Is it Possible to Get a Log of Machines in My Org Who Have Recently Used Flash?

  • November 12, 2020
  • 1 reply
  • 143 views

Does Flash provide any logging from which a list of Flash users can be determined?  This would help assess the impact fo the impending removal of Flash from machines across the enterprise.

    This topic has been closed for replies.
    Correct answer jeromiec83223024

    There's no easy way to do this.  Flash Player can be configured via mms.cfg with the EnableAllowList and AllowListPreview flags to echo error messages about what sites are blocked to the browser console. 

     

    In theory, you could write and distribute a browser plug-in in your organization that scraped that output and sent it to a central location (e.g. Splunk), but given that it's mid-November, that might not be super feasible.  Plus you'd need to do that for every browser in your environment. 

     

    If you have the ability to monitor requests leaving your network, you might just want to audit for requests for files with extensions associated with Flash content (e.g. .swf, .swc, .flv, etc.). 

     

    Here's a link to the system administrator's guide, which might inspire some other ideas about what you could do in your particular ecosystem: 

    https://www.adobe.com/content/dam/acom/en/devnet/flashplayer/articles/flash_player_admin_guide/pdf/latest/flash_player_32_0_admin_guide.pdf

     

     

     

    1 reply

    jeromiec83223024
    jeromiec83223024Correct answer
    Inspiring
    November 16, 2020

    There's no easy way to do this.  Flash Player can be configured via mms.cfg with the EnableAllowList and AllowListPreview flags to echo error messages about what sites are blocked to the browser console. 

     

    In theory, you could write and distribute a browser plug-in in your organization that scraped that output and sent it to a central location (e.g. Splunk), but given that it's mid-November, that might not be super feasible.  Plus you'd need to do that for every browser in your environment. 

     

    If you have the ability to monitor requests leaving your network, you might just want to audit for requests for files with extensions associated with Flash content (e.g. .swf, .swc, .flv, etc.). 

     

    Here's a link to the system administrator's guide, which might inspire some other ideas about what you could do in your particular ecosystem: 

    https://www.adobe.com/content/dam/acom/en/devnet/flashplayer/articles/flash_player_admin_guide/pdf/latest/flash_player_32_0_admin_guide.pdf