🔍 IT Department Cleanup: Common Searches

User Management

AD users leave the Company

• When an User leaves the company they are removed from AD

• The Linux ownership changes from a username to a series of numbers

• The following search will find orphaned files and folders that do not have a valid owner

Storage Management

Proprietary Archive Software Files

• Identifies backup and archive files from various enterprise backup solutions, including Microsoft Backup, Acronis, and CloudBerry.

• Useful for locating and managing enterprise backup files for archiving or restoration purposes.

Compressed Files

• Identifies various compressed file types used for archiving, including ZIP, RAR, 7z, TAR, TAR.GZ (TGZ), and TAR.BZ2 (TBZ2)

• Useful for finding compressed data across different formats, common for backups, storage, or transfer

VMware Files

• Identifies various VMware-related file types, such as VMDK, VMX, VMSN, NVRAM, and LOG.

• Useful for managing or auditing VMware virtual machine files.

Disk Images Types

• Locates archive files like CBL, DMG, IMG, and ISO.

• Useful for managing backup archives, software distribution files, or disk images.

Large Disk Image older than 1 Year, over 5GB in size

• Finds disk image files like dmg, img and iso that haven't been modified in over a year

• Useful for identifying old or unnecessary disk images for cleanup

Smart Search Config

!proprietary_archive_software_files|extension:(pst OR bkf OR bak OR cbb OR tib) AND type:file
!compressed_files|extension:(zip OR rar OR 7z OR tar OR targz OR tgz OR tarbz2 OR tbz2) AND type:file
!vmware_files|extension:(vmdk OR vmx OR vmsn OR nvram OR log) AND type:file
!disk_image_types|extension:(cbl OR dmg OR img OR iso) AND type:file
!large_disk_image_1_year_5gb|extension:(dmg OR img OR iso) AND mtime:[now-10y TO now-12M] AND size:>5368709120