Is it Possible to Get a Log of Machines in My Org Who Have Recently Used Flash?

[Phillip5E31]

Does Flash provide any logging from which a list of Flash users can be determined?  This would help assess the impact fo the impending removal of Flash from machines across the enterprise.

[jeromiec83223024 · Accepted solution]

There's no easy way to do this.  Flash Player can be configured via mms.cfg with the EnableAllowList and AllowListPreview flags to echo error messages about what sites are blocked to the browser console. 

In theory, you could write and distribute a browser plug-in in your organization that scraped that output and sent it to a central location (e.g. Splunk), but given that it's mid-November, that might not be super feasible.  Plus you'd need to do that for every browser in your environment. 

If you have the ability to monitor requests leaving your network, you might just want to audit for requests for files with extensions associated with Flash content (e.g. .swf, .swc, .flv, etc.). 

Here's a link to the system administrator's guide, which might inspire some other ideas about what you could do in your particular ecosystem: 

https://www.adobe.com/content/dam/acom/en/devnet/flashplayer/articles/flash_player_admin_guide/pdf/l...