Lumension® Endpoint Intelligence Center

Intelligence Center » File Lookup - Learn More

The File Lookup Utility is a free, enterprise-focused search engine which provides the details of any Windows executable file - including file hashes, file information and vendor information - needed to make informed whitelisting decisions.

The Lumension© Endpoint Intelligence Center has created a comprehensive database of file information gathered directly from product vendors along with data from the National Institute of Standards and Technology (NIST) National Software Reference Library (NSRL) Reference Data Set (RDS) and our customer community. This customer community consists of Lumension© Application Scanner / Lumension© Endpoint Management and Security Suite administrators as well as people using the Lumension© Application Inspector to scan their individual PCs; taken as a group, this data provides deep insight into well-known files used in a typical business context.

Lumension then generates a file rating, based on provenance and prevalence. Provenance is the source or ownership of the file in question, and is ascertained by whence the data came; a file found to match the direct-from-vendor and/or NSRL data obviously elevates the rating. Prevalence is determined by how often and where the file in question is seen; if the exact same copy of the file is found in all three sources (as determined by the unique hash of it) then the rating is higher.

This database provides IT administrators - particularly those charged with whitelisting applications within their environment - with both the detailed file information and the file rating needed to make trust decisions on previously unknown or suspicious files.