Cloud Excel Addin - data export and report

[LeeWei]

@wpclau looks like a bug in the code. I determine the available properties (columns) from the first record. 

So if the first row does not have a "status.last_scanned_at" property, it will miss it.

Normally the API returns a NULL value for the property, but in this case, the first row is not returning anything for "last_scanned_at".

You can see the data returned by click on "Show API details" button.

For a workaround, the list is returned sorted by ascending computer name. So if it is possible to ensure the first row has a value, that will make it work.

[wpclau]

Ok, thanks for getting back to me and again, for the plugin.

 

[amartilianom]

Hello,

I'm trying to have the add-in incorporated in Excel but I don't get the menu to be shown despite the tool is correctly installed. I've tried installing it as a administrator and the result is the same, I've also checked if the ribbon is deactivated from the Excel options but it doesn't even appear there. Any idea what may be happening? My Office version is the one attached.

Thanks in advance

 

 

[LeeWei]

@amartilianom, the log files are located here:

C:\Users\[user_name]\AppData\Local\Temp\Malwarebytes Excel Addin

adregistrator.log is the log file generated during installation.

adxloader.log is the log file generated when the Addin is being loaded in Excel

You can send to me via private message, and we will look for errors.

 

If think you have already done this, in Excel Menu --> File --> Options screen below, make sure that the Excel Addin is not in the Inactive or Disable lists.

Lastly, I have message you with my contact info to help.

[RickyF]

Hi @LeeWei,

Everytime I try to generate a Detection and Therats report I get this message. No charts are generated after I press OK

Thanks

 

Ricky

[RickyF]

OK. Sorry. I dindt see it

Thanks @wpclau

Ricky

[LeeWei]

3 hours ago, RickyF said:

Hi @LeeWei,

Everytime I try to generate a Detection and Therats report I get this message. No charts are generated after I press OK

Thanks

 

Ricky

@RickyF, there is a change in the API causing the error which I have fixed in version 2.3.1.

Sorry about that.

Lee Wei

[RickyF]

understood. thanks Lee

[RickyF]

Hi @LeeWei,

I had noticed that my Malwarebytes menu was gone from the excell. I supposed that the last  365 upgrade wiped away. I have reinstalled the addin  using the 2.40 last installer.

Now I find this error every time I try to download data.

What can be the problem?

Thanks

Ricky

[LeeWei]

@RickyF I have seen this problem but having a hard time trying to duplicate the error. The error is local, and nothing to do with the Malwarebytes server. Basically, the code cannot create a new worksheet. Others have reported it, but then it goes away.

I wonder if it has to do with another Excel process running away. Can you please use the Task Manager to double-check. Does the problem go away if you were to reboot the computer?

 

[RickyF]

Hi @LeeWei,

As usual you were right 🙂 

I have restarted and everything works smooth 

Thanks again for your support

Ricky

[Kalrand]

Anyway of adding a check for updates on the Malwarebytes Cloud toolbar to stay up-to-date?

[LeeWei]

@Kalrand you are referring to the Excel Addin itself is up to date?

That makes so much sense, and maybe I should just pop a message (but not too often as to be annoying) once in a while?

[Kalrand]

That or possibly something like this, https://docs.microsoft.com/en-us/previous-versions/visualstudio/visual-studio-2010/1zyc39fb(v=vs.100) or https://www.add-in-express.com/creating-addins-blog/2015/02/12/autoupdate-office-addin/. Not even sure if it's on the same page as how the Add-In was built, just something I ran across.

[LeeWei]

@Kalrand Thanks for the information, very useful.

[wep]

I am getting "Error extracting Endpoint data.: Exception from HRESULT: 0x800A03EC.  Any ideas what is going on? Thanks for any help. 

[Kalrand]

3 hours ago, wep said:

I am getting "Error extracting Endpoint data.: Exception from HRESULT: 0x800A03EC.  Any ideas what is going on? Thanks for any help. 

Are you on the latest Add-in, 3.0.4?

[LeeWei]

On 9/3/2019 at 8:29 AM, wep said:

I am getting "Error extracting Endpoint data.: Exception from HRESULT: 0x800A03EC.  Any ideas what is going on? Thanks for any help. 

I have seen this error when there are more rows than Excel can handle.
This current Excel versions can handle 1M rows.

- What version of Excel are you using
- What operation are you doing when you get the error
- Would you mind contacting me at lwei @ malwarebytes.com and I would like to find the bug.

 

[wep]

Sorry I am just getting back. I am running the 3.0.4. Lee I am running Excel 2007 so this is the likely problem. I will email you  so you can check it out.

 

[LeeWei]

@wep Thanks for the extra context and information.

[LeeWei]

@wep I have confirmed that Excel 2007 does not work correctly because there are APIs I use that is not available in 2007.

[MnM33]

Hi @LeeWei!

I'm currently in process of moving endpoints to different groups within the console, until I recently was pointed to this amazing tool! I see there is a way to move endpoints within the addin, however whenever I try to enter a computer name I receive a success message stating it successfully moved 0 endpoints to the group. I have tried multiple ways to enter the computer name into the box with no luck. Any idea why this would "fail"?

 

[LeeWei]

@MnM33, We are meant to paste Machine IDs into the panel to move them to a different group, and not computer names.

- First use menu Configuration and Options, and check the option "Import and Show ID Properties".
- Next use menu Endpoint Computers to import a computers of interest.
- You are meant to copy the ID column of the endpoints of interest to the Move Endpoints screen.

Sorry that this is a little convoluted. Use either the Console or the Excel Addin for the job depending on which one is easier.

The reason for the steps is that when I developed this for a customer, they have a complicated filtering criteria to select hundreds of computers before grabbing the IDs and pasting into the Move Endpoints screen.

Please contact me if I can be of help at lwei @ malwarebytes.com.

 

[MnM33]

This works though, for sure! I'm working on moving over endpoints over to our new EPR policies, and instead of doing them all at once I'm slowly moving them over into their new groups based off their locations. I'm moving to the larger groups now, so this tool will come in handy so I don't have to "manually" move them over one by one to their new homes. 

And with this tool that you have created I have bit more insight to see which groups, or rather which locations, are the most at risk.

I'm glad this tool is here because now we can start getting a little more data to start a targeted training plan for our end users.

[LeeWei]

4 minutes ago, MnM33 said:

This works though, for sure! I'm working on moving over endpoints over to our new EPR policies, and instead of doing them all at once I'm slowly moving them over into their new groups based off their locations. I'm moving to the larger groups now, so this tool will come in handy so I don't have to "manually" move them over one by one to their new homes. 

And with this tool that you have created I have bit more insight to see which groups, or rather which locations, are the most at risk.

I'm glad this tool is here because now we can start getting a little more data to start a targeted training plan for our end users.

Please feel free to send me any enhancements and requests!