HP WebInspect (Desktop) Directories Settings Produced by Hans Enders May 2013 Table of Contents 1. INTRODUCTION: ..................................................................................................................................................2 2. EXPLANATION AND DETAILS ..........................................................................................................................3 SCANDATA FOLDER ............................................................................................................................................................3 REPORTS FOLDER................................................................................................................................................................3 EXPORTS FOLDER ...............................................................................................................................................................3 3. FOLDER PATHS .....................................................................................................................................................4 A. B. C. D. E. WEBINSPECT VERSION 10.0 .....................................................................................................................................4 WEBINSPECT VERSION 9.30 .....................................................................................................................................5 WEBINSPECT VERSION 9.20 .....................................................................................................................................6 WEBINSPECT VERSION 8.0 .......................................................................................................................................7 WEBINSPECT VERSION 7.7 .......................................................................................................................................8 1. Introduction: Although HP WebInspect can be installed to an alternative local drive, its user data is saved to the user’s C: drive by default. This article seeks to record the default values used by various WebInspect versions and also suggest alternative paths for those interested users. HP Fortify – Enterprise Security Products © Hewlett-Packard Confidential Page 2 2. Explanation and Details Most of these settings are found in the Directories panel under the Application Settings (Edit menu > Application Settings > Directories panel). There is also an infrequently used Support Channel panel with its own two directory settings. ScanData Folder The largest space is taken by the Logs folder as well as the Scans or Scandata folder, particularly if MS SQL Express is being used as the scan database rather than a standard SQL Server. Within the Scandata folder is a Scans.XML file that indexes the directory contents for display within the WebInspect UI. When this folder and its contents are moved, the user will want to delete that Scans.XML file so that it will rebuild when WebInspect opens. If this is not done, then the Manage Scans UI within WebInspect will fail to show the actual folder contents. Reports Folder Previously, all Reports output was saved to \My Documents\SPI dynamics\Reports\ and more recently they have become buried more deeply within the program data folders. Since these files are often accessed outside of the WebInspect UI, users may feel more comfortable by placing a short-cut within the My Documents area to take them to the new Generated Reports folder directly. Exports Folder The Exports do not have a user configured field setting. Instead, they default to the user’s application data folders. Since this material is generally used outside of WebInspect, it is recommended that the user create a short-cut to this folder. Below is the path found in WebInspect 10.0. C:\Users\%CURRENTUSER%\AppData\Local\HP\HP WebInspect\Exports\ HP Fortify – Enterprise Security Products © Hewlett-Packard Confidential Page 3 3. Folder Paths A. WebInspect version 10.0 Taken from WebInspect 10.0.490 on Windows 7 (64-bit) Directories Field Name Scans Logs Settings Policies Generated Reports Compliance Templates Scheduled Scans Tool Settings Web Macros Web Forms Web Discovery Additional Paths Support Channel Uploads Support Channel Downloads Default Path Suggestion C:\Users\%CURRENTUSER%\AppData\Local\HP\HP WebInspect\ScanData\ C:\Users\%CURRENTUSER%\AppData\Local\HP\HP WebInspect\Logs\ C:\ProgramData\HP\HP WebInspect\Settings\ C:\ProgramData\HP\HP WebInspect\Policies\ C:\ProgramData\HP\HP WebInspect\GeneratedReports\ C:\Users\%CURRENTUSER%\AppData\Local\HP\HP WebInspect\ComplianceTemplates\ C:\ProgramData\HP\HP WebInspect\Schedule\ScanData\ C:\Users\%CURRENTUSER%\AppData\Local\HP\HP WebInspect\Tools\Settings\ C:\Users\%CURRENTUSER%\Documents\SPI Dynamics\Tools\ C:\Users\%CURRENTUSER%\Documents\SPI Dynamics\Tools\ C:\Users\%CURRENTUSER%\Documents\SPI Dynamics\Tools\ D:\WebInspect Data\ScanData\ Default Path C:\ProgramData\HP\HP WebInspect\SupportChannel\Upload\ C:\ProgramData\HP\HP WebInspect\SupportChannel\Download\ Suggestion D:\WebInspect Data\SupportChannel\Upload\ D:\WebInspect Data\SupportChannel\Download\ HP Fortify – Enterprise Security Products © Hewlett-Packard Confidential Page 4 D:\WebInspect Data\Logs\ D:\WebInspect Data\Settings\ D:\WebInspect Data\Policies\ D:\WebInspect Data\GeneratedReports\ D:\WebInspect Data\ComplianceTemplates\ D:\WebInspect Data\Scheduler\ D:\WebInspect Data\Tools\Settings\ D:\WebInspect Data\Tools\ D:\WebInspect Data\Tools\ D:\WebInspect Data\Tools\ B. WebInspect version 9.30 Taken from an upgraded version of WebInspect 9.30.93.2, on Windows 2003 (32-bit) Directories Field Name Scans Logs Settings Policies Generated Reports Compliance Templates Scheduled Scans Tool Settings Web Macros Web Forms Web Discovery Additional Paths Support Channel Uploads Support Channel Downloads Default Path Suggestion C:\Documents and Settings\%CURRENTUSER%\Local Settings\Application Data\SPI Dynamics\WebInspect\7.0\ScanData C:\Documents and Settings\%CURRENTUSER%\Local Settings\Application Data\SPI Dynamics\WebInspect\7.0\Logs\ C:\Documents and Settings\All Users\Application Data\SPI Dynamics\WebInspect\7.0\Settings\ C:\Documents and Settings\All Users\Application Data\SPI Dynamics\WebInspect\7.0\Policies\ C:\Documents and Settings\All Users\Application Data\SPI Dynamics\WebInspect\7.0\GeneratedReports\ C:\Documents and Settings\%CURRENTUSER%\Local Settings\Application Data\SPI Dynamics\WebInspect\7.0\ComplianceTemplates\ C:\Documents and Settings\All Users\Application Data\SPI Dynamics\WebInspect\7.0\Schedule\ScanData C:\Documents and Settings\%CURRENTUSER%\Local Settings\Application Data\SPI Dynamics\Tools\Settings\ C:\Documents and Settings\%CURRENTUSER%\My Documents\SPI Dynamics\Tools\ C:\Documents and Settings\%CURRENTUSER%\My Documents\SPI Dynamics\Tools\ C:\Documents and Settings\%CURRENTUSER%\My Documents\SPI Dynamics\Tools\ D:\WebInspect Data\ScanData\ Default Path C:\Documents and Settings\All Users\Application Data\SPI Dynamics\WebInspect\7.0\SupportChannel\Upload\ C:\Documents and Settings\All Users\Application Data\SPI Dynamics\WebInspect\7.0\SupportChannel\Download\ HP Fortify – Enterprise Security Products © Hewlett-Packard Confidential Page 5 D:\WebInspect Data\Logs\ D:\WebInspect Data\Settings\ D:\WebInspect Data\Policies\ D:\WebInspect Data\GeneratedReports\ D:\WebInspect Data\ComplianceTemplates\ D:\WebInspect Data\Scheduler\ D:\WebInspect Data\Tools\Settings\ D:\WebInspect Data\Tools\ D:\WebInspect Data\Tools\ D:\WebInspect Data\Tools\ Suggestion D:\WebInspect Data\SupportChannel\Upload\ D:\WebInspect Data\SupportChannel\Download\ C. WebInspect version 9.20 Taken from an upgraded version of WebInspect 9.20.247, on Windows 7 (64-bit) Directories Field Name Scans Logs Settings Policies Generated Reports Compliance Templates Scheduler Tool Settings Web Macros Web Forms Web Discovery Additional Paths Support Channel Uploads Support Channel Downloads Default Path Suggestion C:\Users\%CURRENTUSER%\AppData\Local\SPI Dynamics\WebInspect\7.0\ScanData\ C:\Users\%CURRENTUSER%\AppData\Local\SPI Dynamics\WebInspect\7.0\Logs\ C:\ProgramData\SPI Dynamics\WebInspect\7.0\Settings\ C:\ProgramData\SPI Dynamics\WebInspect\7.0\Policies\ C:\ProgramData\SPI Dynamics\WebInspect\7.0\GeneratedReports\ C:\Users\%CURRENTUSER%\AppData\Local\SPI Dynamics\WebInspect\7.0\ComplianceTemplates\ C:\ProgramData\SPI Dynamics\WebInspect\7.0\Schedule\ScanData\ C:\Users\%CURRENTUSER%\AppData\Local\SPI Dynamics\Tools\Settings\ C:\Users\%CURRENTUSER%\Documents\SPI Dynamics\Tools\ C:\Users\%CURRENTUSER%\Documents\SPI Dynamics\Tools\ C:\Users\%CURRENTUSER%\Documents\SPI Dynamics\Tools\ D:\WebInspect Data\ScanData\ Default Path C:\ProgramData\SPI Dynamics\WebInspect\7.0\SupportChannel\Upload\ C:\ProgramData\SPI Dynamics\WebInspect\7.0\SupportChannel\Download\ Suggestion D:\WebInspect Data\SupportChannel\Upload\ D:\WebInspect Data\SupportChannel\Download\ HP Fortify – Enterprise Security Products © Hewlett-Packard Confidential Page 6 D:\WebInspect Data\Logs\ D:\WebInspect Data\Settings\ D:\WebInspect Data\Policies\ D:\WebInspect Data\GeneratedReports\ D:\WebInspect Data\ComplianceTemplates\ D:\WebInspect Data\Scheduler\ D:\WebInspect Data\Tools\Settings\ D:\WebInspect Data\Tools\ D:\WebInspect Data\Tools\ D:\WebInspect Data\Tools\ D. WebInspect version 8.0 Taken from upgraded version of WebInspect 8.0.548 Directories Field Name Scans Logs Settings Policies Generated Reports Compliance Templates Scheduler Tool Settings Web Macros Web Forms Web Discovery Additional Paths Support Channel Uploads Support Channel Downloads Default Path Suggestion C:\Documents and Settings\%CURRENTUSER%\Local Settings\Application Data\SPI Dynamics\WebInspect\7.0\ScanData\ C:\Documents and Settings\%CURRENTUSER%\Local Settings\Application Data\SPI Dynamics\WebInspect\7.0\Logs\ C:\Documents and Settings\All Users\Application Data\SPI Dynamics\WebInspect\7.0\Settings\ C:\Documents and Settings\All Users\Application Data\SPI Dynamics\WebInspect\7.0\Policies\ C:\Documents and Settings\All Users\Application Data\SPI Dynamics\WebInspect\7.0\GeneratedReports\ C:\Documents and Settings\%CURRENTUSER%\Local Settings\Application Data\SPI Dynamics\WebInspect\7.0\ComplianceTemplates\ C:\Documents and Settings\All Users\Application Data\SPI Dynamics\WebInspect\7.0\Schedule\ C:\Documents and Settings\%CURRENTUSER%\Local Settings\Application Data\SPI Dynamics\Tools\Settings\ C:\Documents and Settings\%CURRENTUSER%\My Documents\SPI Dynamics\Tools\ C:\Documents and Settings\%CURRENTUSER%\My Documents\SPI Dynamics\Tools\ C:\Documents and Settings\%CURRENTUSER%\My Documents\SPI Dynamics\Tools\ D:\WebInspect Data\ScanData\ Default Path C:\Documents and Settings\All Users\Application Data\SPI Dynamics\WebInspect\7.0\SupportChannel\Upload\ C:\Documents and Settings\All Users\Application Data\SPI Dynamics\WebInspect\7.0\SupportChannel\Download\ Suggestion D:\WebInspect Data\SupportChannel\Upload\ HP Fortify – Enterprise Security Products © Hewlett-Packard Confidential Page 7 D:\WebInspect Data\Logs\ D:\WebInspect Data\Settings\ D:\WebInspect Data\Policies\ D:\WebInspect Data\GeneratedReports\ D:\WebInspect Data\ComplianceTemplates\ D:\WebInspect Data\Scheduler\ D:\WebInspect Data\Tools\Settings\ D:\WebInspect Data\Tools\ D:\WebInspect Data\Tools\ D:\WebInspect Data\Tools\ D:\WebInspect Data\SupportChannel\Download\ E. WebInspect version 7.7 Taken from upgraded version of WebInspect 7.7.869 Directories Field Name Scans Logs Settings Policies Generated Reports Compliance Templates Scheduler Tool Settings Web Macros Web Forms Web Discovery Additional Paths Support Channel Uploads Support Channel Downloads Default Path Suggestion C:\Documents and Settings\%CURRENTUSER%\Local Settings\Application Data\SPI Dynamics\WebInspect\7.0\ScanData\ C:\Documents and Settings\%CURRENTUSER%\Local Settings\Application Data\SPI Dynamics\WebInspect\7.0\Logs\ C:\Documents and Settings\All Users\Application Data\SPI Dynamics\WebInspect\7.0\Settings\ C:\Documents and Settings\All Users\Application Data\SPI Dynamics\WebInspect\7.0\Policies\ C:\Documents and Settings\%CURRENTUSER%\My Documents\SPI Dynamics\WebInspect\SavedReports C:\WebInspect Data\SavedReports C:\Documents and Settings\%CURRENTUSER%\Local Settings\Application Data\SPI Dynamics\WebInspect\7.0\ComplianceTemplates\ C:\Documents and Settings\All Users\Application Data\SPI Dynamics\WebInspect\7.0\Schedule\ (not available field) C:\Documents and Settings\%CURRENTUSER%\My Documents\SPI Dynamics\Tools\ C:\Documents and Settings\%CURRENTUSER%\My Documents\SPI Dynamics\Tools\ C:\Documents and Settings\%CURRENTUSER%\My Documents\SPI Dynamics\Tools\ D:\WebInspect Data\ScanData\ Default Path C:\Documents and Settings\All Users\Application Data\SPI Dynamics\WebInspect\7.0\SupportChannel\Upload\ C:\Documents and Settings\All Users\Application Data\SPI Dynamics\WebInspect\7.0\SupportChannel\Download\ Suggestion D:\WebInspect Data\SupportChannel\Upload\ HP Fortify – Enterprise Security Products © Hewlett-Packard Confidential Page 8 D:\WebInspect Data\Logs\ D:\WebInspect Data\Settings\ D:\WebInspect Data\Policies\ D:\WebInspect Data\GeneratedReports\ D:\WebInspect Data\ComplianceTemplates\ D:\WebInspect Data\Scheduler\ D:\WebInspect Data\Tools\ D:\WebInspect Data\Tools\ D:\WebInspect Data\Tools\ D:\WebInspect Data\SupportChannel\Download\