Sikuliaq IT Asset Manager (skqitam)

• Code: https://github.alaska.edu/skq/skq-it-am.git
• Copyright © 2021 University of Alaska Fairbanks - College of Fisheries and Ocean Science - R/V Sikuliaq
• Author: John Haverlack (jehaverlack@alaska.edu)
• Proposed Open Source License: ISC License (ISC)
• Status: 1.0.5 2023-05-11 - Proxmox Detection

The Sikuliaq IT Asset Manager is a non-invasive tool that can be safely run on Windows, Mac, and Linux hosts to collect and report hardware and software information for IT Cybersecurity Auditing purposes.

Tutorial Video

Goals

• Built on Cross-Platform Open Source Framework
• Minimally invasive installation using Native system calls
• Runs without Admin Privileges
• Facilitates centralized data collection of an organizations computers

Installation

Server Setup

• Currently Requires UA GitHub Access, not published openly on the Internet.
• Tested on Debian Linux but should work on other Linux or OS X platforms. Windows powershell setup scripts should be relatively easy to add.

Clone Code Base

git clone https://www.sikuliaq.alaska.edu/git/skq/skq-it-am.git

Run Server Setup

Tested on Debian 10, Raspbian 10, and CentOS 7. Will likely work on any modern Linux and OS X OS.

cd skq-it-am
./server-setup.sh

Start Server

./start-server.sh
jehaverlack@jehaverlack-dt:~/Devel/Sikuliaq/skq-it-am$ ./start-server.sh
INFO: Generating: /home/jehaverlack/Devel/Sikuliaq/skq-it-am/download/skqitam-client.tgz
INFO: Generating: /home/jehaverlack/Devel/Sikuliaq/skq-it-am/download/skqitam-client.zip
INFO: Generating: /home/jehaverlack/Devel/Sikuliaq/skq-it-am/download/skqitam-client-win7-installer.zip

Sikuliaq Cyber Asset Manager Server
  - Version: v1.0.0 2021-07-16 (Beta)
  - Copyright (C) 2021 University of Alaska Fairbanks - College of Fisheries and Ocean Sciences - R/V Sikuliaq
  - Author:  John Haverlack (jehaverlack@alaska.edu)

Status: STARTED
  Node.JS: v14.17.1
  WebUI: http://10.1.0.123:8411
  WebUI: http://[fc2f:f025:f9d7:1718:5617:4ae7:837:a945]:8411

NOTE:  Be sure to open port 8411 to the above IP's
       on server and network firewalls.

Point your browser to:

• [http://localhost:8411] or the URL printed at the command line.
• Follow the directions to run the skqitam client on Windows, Mac, and Linux hosts

NOTE: You will need to open up port 8411 on you localhost (and/or LAN) firewall

This can be done on Debian with:

sudo apt install ufw

sudo ufw allow 8411/tcp

sudo ufw enable

sudo systemctl restart ufw

sudo ufw status

Processing data

1. After collecting data from at least on client
2. Run: ./analyze-data.sh from the skq-it-am directory.

Then navigate to the Stats and Assets menu items in the web interface.

Caveats

• The service runs on port 8411 and is not secured by SSL or authentication. It is advised to run skq-it-am only on internal networks and NOT openly on the Internet.
• Sometimes you have to force releast the website to get the Config to load (Bug needs fixed)

Screenshots